Microsoft

Microsoft February 2022 Patch Tuesday Fixes 48 flaws, 1 Zero-day Today is Microsoft’s February 2022 Patch Tuesday, and with it comes fixes for one zero-day vulnerability and a total of 48 flaws. Microsoft has fixed 48 vulnerabilities (not including 22 Microsoft Edge vulnerabilities ) with today’s update, with none of them classified Read more…

Microsoft Plans to Kill Malware Delivery via Office Macros Microsoft announced today that it will make it difficult to enable VBA macros downloaded from the Internet in several Microsoft Office apps starting in early April, effectively killing a popular distribution method for malware. Using VBA macros embedded in malicious Office Read more…

Microsoft Fixes Windows Active Directory Bug Caused by Jan Updates Microsoft says it has fixed a known issue triggered by last month’s Windows updates that would cause apps using Microsoft .NET to experience problems, close, or throw errors when acquiring or setting Active Directory Forest Trust Information. This issue impacts Read more…

Microsoft Disables MSIX Protocol Handler Abused in Emotet Attacks Microsoft has disabled the MSIX ms-appinstaller protocol handler exploited in malware attacks to install malicious apps directly from a website via a Windows AppX Installer spoofing vulnerability. Today’s decision comes after the company released security updates to address the flaw (tracked as CVE-2021-43890) during Read more…

Microsoft Blocked Billions of Brute-force and Phishing Attacks Last Year Office 365 and Azure Active Directory (Azure AD) customers were the targets of billions of phishing emails and brute force attacks successfully blocked last year by Microsoft. “From January 2021 through December 2021, we’ve blocked more than 25.6 billion Azure Read more…

Office 365 Boosts Email Security Against MITM, Downgrade Attacks Microsoft has added SMTP MTA Strict Transport Security (MTA-STS) support to Exchange Online to ensure Office 365 customers’ email communication integrity and security. Redmond first announced MTA-STS’ introduction in September 2020, after revealing that it was also working on adding inbound and outbound support for DNSSEC (Domain Name Read more…

Microsoft Sentinel Adds Threat Monitoring for GitHub Repos Microsoft Sentinel now comes with support for continuous GitHub threat monitoring, which helps keep track of potentially malicious events after ingesting GitHub enterprise repository logs. Microsoft Sentinel (previously known as Azure Sentinel) is Redmond’s cloud-native SIEM (Security Information and Event Management) platform. It Read more…

Microsoft Defender Now Detects Android and iOS Vulnerabilities Microsoft says threat and vulnerability management support for Android and iOS has reached general availability in Microsoft Defender for Endpoint, the company’s enterprise endpoint security platform. “With this new cross-platform coverage, threat and vulnerability management capabilities now support all major device platforms Read more…

Microsoft PowerToys Adds Mouse and File Explorer Utilities Microsoft has updated PowerToys with three new utilities, including a new mouse crosshair tool to quickly find the pointer on the screen and two new File Explorer add-ons. PowerToys 0.55.0 also comes with a long list of bug fixes, improvements, and changes Read more…