Microsoft Security Intelligence News Today

Read more about Iran-based threat actor MERCURY caught targeting hybrid environment on Devdiscourse

Microsoft revealed today that its security teams are tracking more than 100 threat actors deploying ransomware during attacks.

MS-SQL servers with weak protection being targeted by ransomware operators

Attackers appear to have found a way around PowerShell monitoring by using a default utility instead.

The cyber actors behind the campaign are using brute force attacks for initial breach, according to Microsoft

Microsoft has issued a warning about a new botnet that installs a cryptocurrency miner to create digicash.

A mutation of the Sysrv botnet is infecting servers with cryptomining malware.

A new variant of the Sysrv botnet has added a recent Spring Cloud Gateway vulnerability to its exploit portfolio, Microsoft warns.

Microsoft 365 customers could be at risk. The company has issued a warning for users of its office service, noting on Twitter that a potentially malicious app,

Microsoft is warning of a new phishing attack that is abusing OAuth request links and “targeting hundreds of orgs.”