Microsoft

Microsoft Skype Challenge: Can You Solve this Puzzle 10 Times? New Skype users report frustration after being presented with a captcha that requires them to solve a complex puzzle ten times before signing up for the service. Tests by BleepingComputer confirmed the problematic captcha required when signing up for a Microsoft account via Read more…

Microsoft Exchange Year 2022 Bug in FIP-FS Breaks Email Delivery Microsoft Exchange on-premise servers cannot deliver email starting on January 1st, 2022, due to a “Year 2022” bug in the FIP-FS anti-malware scanning engine. Starting with Exchange Server 2013, Microsoft enabled the FIP-FS anti-spam and anti-malware scanning engine by default Read more…

Microsoft Defender Log4j Scanner Triggers False Positive Alerts Microsoft Defender for Endpoint is currently showing “sensor tampering” alerts linked to the company’s newly deployed Microsoft 365 Defender scanner for Log4j processes. The alerts are reportedly mainly shown on Windows Server 2016 systems and warn of “possible sensor tampering in memory was detected by Read more…

Microsoft: Windows 11 Bug Causes HDR Color Rendering Issues Microsoft has confirmed a new issue impacting devices running Windows 11, version 21H2, where apps using Win32 APIs to render colors on some high dynamic range (HDR) displays may not work as expected. HDR displays come with a notably increased range of Read more…

Microsoft Azure App Service flaw Exposed Customer Source Code A security flaw found in Azure App Service, a Microsoft-managed platform for building and hosting web apps, led to the exposure of PHP, Node, Python, Ruby, or Java customer source code for at least four years, since 2017. Only Azure App Service Linux customers were Read more…

Microsoft Teams Bug Allowing Phishing Unpatched Since March Microsoft said it won’t fix or is delaying patches for several security flaws impacting Microsoft Teams’ link preview feature reported since March 2021. German IT security consultancy firm Positive Security’s co-founder Fabian Bräunlein discovered four vulnerabilities leading to Server-Side Request Forgery (SSRF), Read more…

Microsoft Warns of Easy Windows Domain Takeover via Active Directory Bugs Microsoft warned customers today to patch two Active Directory domain service privilege escalation security flaws that, when combined, allow attackers to easily takeover Windows domains. The company released security updates to address the two security vulnerabilities (tracked as CVE-2021-42287 and CVE-2021-42278 and reported Read more…

Microsoft: Khonsari Ransomware Hits Self-hosted Minecraft Servers Microsoft urges admins of self-hosted Minecraft servers to upgrade to the latest release to defend against Khonsari ransomware attacks exploiting the critical Log4Shell security vulnerability. Mojang Studios, the Swedish video game developer behind Minecraft, released an emergency security update last week to address the bug tracked as CVE-2021-44228 in Read more…

Firefox Users can’t reach Microsoft.com — Here’s What to Do Those using the Mozilla Firefox web browser are left unable to access microsoft.com and its subdomains this week. Tests by BleepingComputer confirm the issue relates to SSL certificate validation errors. Below we explain what can you do to remedy the issue. Read more…

Microsoft to set Windows Terminal as Default Console in Windows 11 Microsoft is working on making Windows Terminal the default terminal emulator program in Windows 11 instead of the Windows Console Host, starting next year. Windows Terminal was unveiled by Redmond at the Build developer conference in May 2019 and was officially launched Read more…