Microsoft

Microsoft Defender for Business Stand-alone Now Generally Available Microsoft says that its enterprise-grade endpoint security for small to medium-sized businesses is now generally available as a standalone solution. Known as Microsoft Defender for Business, this product is designed for SMBs with up to 300 employees who need protection against malware, phishing, and ransomware attacks on Windows, Read more…

Microsoft Fixes Windows 11 Bug Causing Flickers in Safe Mode Microsoft has addressed a newly acknowledged known issue that caused flickering screen problems and made some Windows apps (e.g., File Explorer, Start Menu, and Taskbar) seem unstable in Safe Mode without Networking. The problems only affect systems running Windows 11, Read more…

Microsoft Says Russia Hit Ukraine with Hundreds of Cyberattacks Microsoft has revealed the true scale of Russian-backed cyberattacks against Ukraine since the invasion, with hundreds of attempts from multiple Russian hacking groups targeting the country’s infrastructure and Ukrainian citizens. These attacks also include the use of destructive malware designed to Read more…

Microsoft Fixes ExtraReplica Azure Bugs that Exposed User Databases Microsoft has addressed a chain of critical vulnerabilities found in the Azure Database for PostgreSQL Flexible Server that could let malicious users escalate privileges and gain access to other customers’ databases after bypassing authentication. The Flexible Server deployment option for Azure Database for Read more…

Hands on with Microsoft Edge’s New Built-in VPN Feature Microsoft is working on a built-in VPN functionality for the Edge browser called ‘Edge Secure Network’, but there’s a catch – it is not a proper replacement for your VPN. Edge’s Secure Network is powered by Cloudflare – one of the Read more…

Microsoft Exchange Servers Hacked to Deploy Hive Ransomware A Hive ransomware affiliate has been targeting Microsoft Exchange servers vulnerable to ProxyShell security issues to deploy various backdoors, including Cobalt Strike beacon. From there, the threat actors perform network reconnaissance, steal admin account credentials, exfiltrate valuable data, ultimately deploying the file-encrypting payload. The Read more…

Microsoft Defender Flags Google Chrome Updates as Suspicious Microsoft Defender for Endpoint has been tagging Google Chrome updates delivered via Google Update as suspicious activity due to a false positive issue. According to Windows system admins reports [1, 2, 3, 4], the security solution (formerly known as Microsoft Defender ATP) began marking Chrome updates Read more…

Microsoft: Office 2013 will Reach End of Support in April 2023 Microsoft has reminded customers earlier this week that Microsoft Office 2013 is approaching its end of support next year, advising them to switch to a newer version to reduce their exposure to security risks. “After five years of Mainstream Read more…

Microsoft Increases Awards for High-Impact Microsoft 365 Bugs Microsoft has increased the maximum awards for high-impact security flaws reported through the Microsoft 365 and the Dynamics 365 / Power Platform bug bounty programs. With the expansion of these two programs, security researchers reporting Office 365 and Microsoft Account service vulnerabilities can earn up to Read more…

Microsoft Disrupts Zloader Malware in Global Operation A months-long global operation led by Microsoft’s Digital Crimes Unit (DCU) has taken down dozens of domains used as command-and-control (C2) servers by the notorious ZLoader botnet. The court order obtained by Microsoft allowed it to sinkhole 65 hardcoded domains used by the Read more…