You Need to Patch Windows Remote Desktop Vulnerability Now
This vulnerability enables any standard unprivileged user connected to a remote machine via remote desktop to gain file system access to the client machines
Topic
Microsoft
27 articles on this topic.
What are Dependency Confusion Attacks?
A dependency confusion attack occurs when a software installer script is tricked into pulling malicious code file from a public repository instead of the intended file of the same name from an internal repository.
New Azure AD Bug Allows Attackers Brute-Force Passwords
An unpatched security weakness in Azure Active Directory might be leveraged by attackers to conduct undetected brute-force attacks, according to security researchers.
Microsoft Released Mitigations on Recently Discovered Attack Method
PetitPotam takes advantage of servers where the Active Directory Certificate Services (AD CS) is not configured with protections for NTLM
Spreading Malware Using Old Techniques. It Still Works!
Operators of the malware known as SolarMarker, are using an old technique called SEO poisoning to trick users to follow links on PDF documents stuffed with many SEO keywords and redirect them to malware.
Microsoft Confirms Serious Vulnerability
Microsoft has confirmed the risk that "an attacker with physical access to a system can use Thunderspy to read and copy data even from systems
Microsoft Offers $100,000 to Hack their Linux OS
Microsoft Offers 100,000 if you hack their custom Linux OS.
Microsoft Offers Free Cybersecurity Service Protection to Healthcare Staff
Recently numerous hospitals became the target of cyber attacks both in Europe and the United States. Microsoft decided to offer its security service AccountGuard for free to healthcare staff as well as human rights and humanitarian organizations.
Microsoft Exchange Servers Still Unpatched, Leaves them open to Remote Code Execution Vulnerability
Based on a Rapid7 survey more than 357 thousand Exchange Servers are vulnerable to a latest RCE vulnerability which allows an attacker to use an Exchange user