Microsoft Security Intelligence Twitter News Today

Microsoft is warning of a new phishing attack that is abusing OAuth request links and “targeting hundreds of orgs.”

A phishing campaign is going on right now. Its meant to con Office 365 users into giving up their credentials. Microsoft says to watch out for it. Microsoft wants to alert you to a phishing scheme going on that involves the most classic of tricks, including barely misspelled domain names, URLs, and sender addresses. If youre hyper-vigilant of typos and tend to catch these things even when your spam filters fail to, youre all safe. But for everyone else who only takes a quick glance to verify wh...

Microsoft is warning the aerospace and travel sectors of a new targeted attack campaign aimed at stealing sensitive information from affected companies. The tech giant said it had been tracking the “dynamic campaign” for several months via a series of spear-phishing emails designed to deliver an “actively developed loader.” The screenshot posted to Microsoft Security Intelligence Twitter feed was of a phishing email spoofing a legitimate organization and requesting a quote for a cargo c...

A strain of ransomware called DearCry is being used to target unpatched Exchange servers. Microsoft has released patches for Exchange servers, but some organizations have not patched systems yet. Check Point Research reports that exploitation attempts doubled every 2-3 hours over a recent 24-hour period. While Microsoft has rolled out emergency patches to address vulnerabilities on its Exchange server software, many systems remain unpatched. Attackers are now increasingly going after unpatched ...