Microsoft

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges.

bleepingcomputer.com12 août

Hackers leverage new Microsoft SharePoint exploit in attacks

Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of PoC exploit code by Rapid7.

helpnetsecurity.com12 août

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks

Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors.

securityaffairs.com12 août

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

Nightmare Eclipse has dropped ShieldBreak, a Windows zero-day exploit that allows any user to gain System privileges.

securityweek.com12 août

Military device manufacturer discloses cyber incident to SEC

IEH was breached by a phishing attack that exposed its Microsoft 365 inbox, including emails and potentially export-controlled military data.

securityaffairs.com9 août

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

old.reddit.com8 août

Swiss IT agency hacked, 200 accounts compromised, SharePoint vulns suspected

200 Swiss government accounts were compromised after hackers exploited Microsoft SharePoint vulnerabilities at federal IT office BIT.

helpnetsecurity.com6 août

Hackers run khunt post-exploitation toolkit from Oracle database

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry hives locally.

feeds.feedburner.com6 août

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts.

bleepingcomputer.com4 août

Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

Midnight Blizzard hackers are hijacking hotel Wi-Fi networks to steal Microsoft 365 logins in a campaign Microsoft calls CaptiveCrunch.

helpnetsecurity.com4 août

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking

Russian state-sponsored hackers have been compromising hotel Wi-Fi networks around the world to steal travelers' login credentials and infect devices with espionage malware, Microsoft said.

therecord.media3 août

Microsoft Purview Information Protection and Adobe

old.reddit.com2 août

Alternative plan and feasibility study for FOSS Intune?

old.reddit.com2 août

Windows Server Backup fails with "semaphore timeout" (0x8004245f) or unknown error"

old.reddit.com2 août

Strengthen identity and access controls

Learn about Authenticator-specific requirements, configuration, and troubleshooting for passkeys in Microsoft Authenticator for Microsoft Entra ID.

This image is double-silly because it features the FUCKING PIECE OF SHIT COPY-MENU WINDOWS 11 WON...

This image is double-silly because it features the FUCKING PIECE OF SHIT COPY-MENU WINDOWS 11 WONT KILL. IM NOT GOING TO RESTART MY COMPUTER. FUCK YOU MICROSOFT

t.me31 juil.

Protect sensitive data in motion across software as a service (SaaS) and AI apps with Microsoft P...

Stop sensitive data from leaving your organization. Extend data detection and identity-aware enforcement to the network—now in preview.