Microsoft

Microsoft Blocks Polonium Hackers from Using OneDrive in Attacks Microsoft said it blocked a Lebanon-based hacking group it tracks as Polonium from using the OneDrive cloud storage platform for data exfiltration and command and control while targeting and compromising Israelian organizations. The company also suspended more than 20 malicious OneDrive Read more…

Microsoft Shares Mitigation for Office zero-day Exploited in Attacks Microsoft has shared mitigation measures to block attacks exploiting a newly discovered Microsoft Office zero-day flaw abused in the wild to execute malicious code remotely. The bug is a Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution vulnerability reported by crazyman of Read more…

New Microsoft Office zero-day Used in Attacks to Execute PowerShell Security researchers have discovered a new Microsoft Office zero-day vulnerability that is being used in attacks to execute malicious PowerShell commands via Microsoft Diagnostic Tool (MSDT) simply by opening a Word document. The vulnerability, which has yet to receive a Read more…

Microsoft: The New Windows 11 Features from Build 2022 During the Build 2022 developer conference, Microsoft announced a number of new features for Windows 11, including an improved Windows Subsystem for Android (WSA) and more. Microsoft is upgrading the Android OS within the subsystem to Android 12L and adding support Read more…

Microsoft Finds Severe Bugs in Android Apps from Large Mobile Providers Microsoft security researchers have found high severity vulnerabilities in a framework used by Android apps from multiple large international mobile service providers. The researchers found these vulnerabilities (tracked as CVE-2021-42598, CVE-2021-42599, CVE-2021-42600, and CVE-2021-42601) in a mobile framework owned by mce Systems exposing users to Read more…

Microsoft to Force Better Security Defaults for all Azure AD Tenants Microsoft has announced that it will automatically enable stricter secure default settings known as ‘security defaults’ on all existing Azure Active Directory (Azure AD) tenants in late June 2022. First introduced in October 2019 only for new tenants, security Read more…

Microsoft: Windows 11 22H2 has Reached RTM with Build 22621 Microsoft’s Windows Hardware Compatibility Program has confirmed that Windows 11 22H2 build 22621 is the Released to Manufacturing (RTM) build, meaning that the development of Window’s 11 next feature update is ready for release. Microsoft confirmed the build in a new Read more…

Microsoft Shares Mitigation for Windows KrbRelayUp LPE Attacks Microsoft has shared guidance to help admins defend their Windows enterprise environments against KrbRelayUp attacks that enable attackers to gain SYSTEM privileges on Windows systems with default configurations. Attackers can launch this attack using the KrbRelayUp tool developed by security researcher Mor Davidovich as an open-source wrapper Read more…

Microsoft Adds Support for WSL2 Distros on Windows Server 2022 Microsoft has announced that Windows Subsystem for Linux (WSL 2) distros are now supported on Windows Server 2022 after installing this week’s cumulative update previews. To install the Windows Server 2022 KB5014021 update, you must go to Settings > Windows Update and manually ‘Check for updates.’  Read more…

Microsoft Adds Office Subscriptions to Windows 11 Account Settings Microsoft has improved the account settings in the latest Windows 11 preview build, a settings page that now lists Office subscriptions linked to the user’s Microsoft 365 account. The Windows Insider team started rolling out a new ‘Your Microsoft account’ settings Read more…