Browsing Category
Microsoft
187 posts
AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft’s Multi-Factor Authentication (MFA), known as AuthQuake,…
Critical Windows Zero-Day Alert: No Patch Available Yet for Users
Protect your systems with automated patching and server hardening strategies to defend against vulnerabilities like the NTLM zero-day.…
Malware Bypasses Microsoft Defender and 2FA to Steal $24K in Crypto
Malware bypasses Microsoft Defender and 2FA, stealing $24K in cryptocurrency via a fake NFT game app. Learn how…
Critical Windows Kerberos Flaw Exposes Millions of Servers to Attack
A critical vulnerability in the Windows Kerberos authentication protocol poses a significant risk to millions of servers. Microsoft…
Microsoft Power Pages Misconfigurations Expose Millions of Records Globally
SaaS Security firm AppOmni has identified misconfigurations in Microsoft Power Pages that can lead to severe data breaches.…
Microsoft’s November Patch Tuesday Fixes 91 Vulnerabilities, 4 Zero-Days
Microsoft’s November 2024 Patch Tuesday update fixes 91 security vulnerabilities, including four zero-day vulnerabilities. Critical fixes address actively…
Microsoft Bookings Flaw Enables Account Hijacking and Impersonation
A vulnerability in Microsoft Bookings can expose your organization to serious security risks. Learn how attackers can exploit…
“HM Surf” macOS Flaw Lets Attackers Access Camera and Mic – Patch Now!
Researchers at Microsoft discovered a new macOS vulnerability, “HM Surf” (CVE-2024-44133), which bypasses TCC protections, allowing unauthorized access…
Microsoft September 2024 Patch Tuesday Fixes 79 Flaws, Including 4 Zero-Days
Microsoft's September 2024 Patch Tuesday is here. Make sure you’ve applied the necessary patches!
Hackers Could Exploit Microsoft Teams on macOS to Steal Data
Cisco Talos reveals 8 vulnerabilities in Microsoft’s macOS apps, exploiting TCC framework weaknesses. Hackers can bypass security, inject…