Opsec Cyber Microsoft Archives - Page 10 of 20

Category Archives: Microsoft

Mysterious “Follina” zero-day hole in Office – here’s what to do!

May 31 2022 By Paul Ducklin in Microsoft, Security, Security threats, Vulnerability, Zero-day

News has emerged of a "feature" in Office that has been abused as a zero-day bug to run evil code. Turning off macros doesn't help!

Microsoft patches the Patch Tuesday patch that broke authentication

May 20 2022 By Paul Ducklin in authentication, Microsoft, Security, Vulnerability, Windows

Remember the good old days when security patches rarely needed patches? Because security patches themlelves were rare enough anyway?

Your Phone May Soon Replace Many of Your Passwords

May 7 2022 By BrianKrebs in A Little Sunshine, Apple, Google, Microsoft, Security

Apple, Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to...

GitHub issues final report on supply-chain source code intrusions

April 29 2022 By Paul Ducklin in Microsoft, Security

Learn how to find out which apps you've given access rights to, and how to revoke those rights immediately in an emergency.

Fighting Fake EDRs With ‘Credit Ratings’ for Police

April 27 2022 By BrianKrebs in A Little Sunshine, Apple, FBI, Google, Microsoft, Security, The Coming Storm, Twitter, Web Fraud 2.0

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers,...

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

April 22 2022 By BrianKrebs in A Little Sunshine, Apple, Microsoft, Ne'er-Do-Well News, Security

KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active...

Conti’s Ransomware Toll on the Healthcare Industry

April 18 2022 By BrianKrebs in A Little Sunshine, Emsisoft, FBI, Microsoft, Ne'er-Do-Well News, Ransomware, Security

Conti -- one of the most ruthless and successful Russian ransomware groups -- publicly declared during the height of the COVID-19 pandemic that it would refrain from targeting healthcare...

The Original APT: Advanced Persistent Teenagers

April 6 2022 By BrianKrebs in A Little Sunshine, APT, FBI, Microsoft, Ne'er-Do-Well News, Security, Tenable, The Coming Storm

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors and state-sponsored hacking groups, both of which tend to take days or weeks to pivot from an...

Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”

March 29 2022 By BrianKrebs in FBI, Microsoft, Ne'er-Do-Well News, Security, The Coming Storm, Web Fraud 2.0

There is a terrifying and highly effective "method" that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms....