Page 35 - Microsoft Security News Today

Adversaries are deploying DearCry ransomware on victim systems after hacking into on-premise Microsoft Exchange servers that remain unpatched, Microsoft acknowledged late Thursday.

A recently discovered exploit for the Microsoft Exchange Server gives hackers a way to infiltrate company servers.

Microsoft discusses the changing threat landscape

Kudelski S.A.: ANNUAL RESULTS 2020 HIGHLIGHTS: USD 741.5 million of total revenues and other operating income, USD 64.3 million of EBITDA and USD 122.5 million of operating free cash flow Successfully adapted structure and operations to effectively accommodate impact of COVID-19 Strong resilience of Digital TV produced a USD 5.9 million increase of EBITDA to USD 96.9 million Positive momentum in cybersecurity increased gross margins by 22.6%, driven by 57.4% growth in European revenues IoT port...

Why operational resilience will be key in 2021, and how this impacts cybersecurity Ann Johnson Corporate Vice President, SCI Business Development Share The lessons we have learned during the past 12 months have demonstrated that the ability to respond to and bounce back from adversity in general, can impact the short-and long-term success of any organization. It can even dictate the leaders and laggards in any industry. When we take into consideration that as security threats a...

01/19/2021 Security solutions company Malwarebytes affirmed on Monday that alternative methods besides tainted SolarWinds Orion software were used in the recent "Solorigate" advanced persistent threat (APT) attacks. Malwarebytes has inside knowledge to that effect because it, too, was a victim of this APT group, which is alleged to be a nation-state actor, with Russia having been named. Malwarebytes doesnt use the SolarWinds Orion management software, which got corrupted by a so-called "s...

This move will block vulnerable connections from noncompliant devices, according to a Microsoft Security and Response Center blog post. DC enforcement mode requires both Windows and non-Windows devices to use secure Remote Procedure Call (RPC) with a Netlogon secure channel, unless a business has allowed an account to be exposed by adding an exception for a noncompliant device.  CVE-2020-1472 is a privilege escalation flaw in the Windows Netlogon Remote Protocol (MS-NRPC) with a CVSS score of ...

MSRC Team / December 21, 2020 March 4, 2021 UPDATE: Microsoft continues to work with partners and customers to expand our knowledge of the threat actor behind the nation-state cyberattacks that compromised the supply chain of SolarWinds and impacted multiple other organizations. Microsoft previously used ‘Solorigate’ as the primary designation for the actor, but moving forward, we want to place appropriate focus on the actors behind the sophisticated attacks, rather than one of the exam...