Microsoft

Microsoft Fixes Bug Blocking Defender for Endpoint on Windows Server Microsoft has addressed a known issue that plagued Windows Server customers for weeks, preventing the Defender for Endpoint enterprise security platform from launching on some systems. When it acknowledged the bug in November, Microsoft explained that the endpoint security solution (previously known as Read more…

Microsoft: These are the Building Blocks of QBot Malware Attacks As QBot campaigns increase in size and frequency, researchers are looking into ways to break the trojan’s distribution chain and tackle the threat. Over the past few years, Qbot (Qakbot or QuakBot) has grown into widely spread Windows malware that Read more…

Microsoft, Google OAuth Flaws Can be Abused in Phishing Attacks Researchers have discovered a set of previously unknown methods to launch URL redirection attacks against weak OAuth 2.0 implementations. These attacks can lead to the bypassing of phishing detection and email security solutions, and at the same time, gives phishing Read more…

Microsoft Previews New Endpoint Security Solution for SMBs Microsoft Defender for Business, a new endpoint security solution specially built for small and medium-sized businesses (SMBs), is now rolling out in preview worldwide. It helps businesses with up to 300 employees defend against cybersecurity threats, including ransomware, malware, and phishing, across Read more…

Windows 11 can Now Install WSL from the Microsoft Store Microsoft has added the Windows Subsystem for Linux (WSL) as a separate app to the Microsoft Store with the release of Windows 11 Insider Preview Build 22518 to the Dev Channel. The WSL store app for Windows 11 machines was announced Read more…

Microsoft: Secured-core Servers Help Prevent Ransomware Attacks Microsoft says the first Secured-core certified Windows Server and Microsoft Azure Stack HCI devices are now available to protect customers’ networks from security threats, including ransomware attacks. Secured-core devices are marketed as a solution to the increasing number of firmware vulnerabilities attackers can exploit Read more…

US Universities Targeted by Office 365 Phishing Attacks US universities are being targeted in multiple phishing attacks designed to impersonate college login portals to steal valuable Office 365 credentials. The lures used in the latest campaigns include COVID-19 Delta and Omicron variants and various themes on how these allegedly impact Read more…

Microsoft Starts Rolling Out Redesigned Notepad for Windows 11 Microsoft has started rolling out the new and wholly redesigned Notepad for Windows 11 to all Windows Insiders in the Dev Channel. Redmond first teased the new app design in June via screenshots shared before the official launch to show off Windows 11’s Read more…

Microsoft Seizes Sites Used by APT15 Chinese State Hackers Microsoft seized today dozens of malicious sites used by the Nickel China-based hacking group to target organizations in the US and 28 other countries worldwide. In their attacks, the Nickel threat actor (also tracked as KE3CHANG, APT15, Vixen Panda, Royal APT, and Playful Dragon) Read more…

Convincing Microsoft Phishing Uses Fake Office 365 Spam Alerts A persuasive and ongoing series of phishing attacks are using fake Office 365 notifications asking the recipients to review blocked spam messages, with the end goal of stealing their Microsoft credentials. What makes these phishing emails especially convincing is the use of quarantine[at]messaging.microsoft.com to send Read more…