Stay updated with breaking news from Microsoft Security Response. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Severe flaws in Microsoft Exchange and Windows Print Spooler stood out amid a wide range of vulnerabilities security teams were forced to prioritize in 2021.
HEADLINES & GLOBAL NEWS By (Photo : Pete Linforth/Pixabay) Hackers strike again at SolarWinds after an earlier cyberattack several months back. This activity was verified by Microsoft, noting that over 36 countries were targeted. Hacked again Microsoft confirmed on Friday a new cyberattack on SolarWinds, bolstered by the new campaign launched by the hackers that target the U.S. interests, reported Epoch Times. Going by various names including Nobelium, the alleged Russian-based hacking group employed "password spray and brute-force attacks." It was able to shred firewalls with ease and...
Microsoft fixes Windows 10's drive corrupting NTFS denial of service vulnerability In the middle of January, we reported about a vulnerability in Windows 10 that could be used to corrupt the contents of an NTFS formatted drive. A specially crafted folder name was all that was needed to cause a volume to be marked as dirty, and then require a fix with the Chkdsk utility. But Chkdsk did not always do the trick, leaving victims with unbootable systems. A couple of months ago, Microsoft started testing a fix with Windows Insiders and now the patch is being made available to everyone. It addresses...
Press Release: The Cybersecurity and Infrastructure Security Agency (CISA) strongly urges its partners to follow guidance provided to Federal Civilian Executive Branch Departments and Agencies HERE. This CISA Emergency Directive outlines key steps federal officials must take to immediately address this vulnerability. We cannot stress enough the seriousness of this vulnerability; it is widespread and is indiscriminate. As a follow up to the conference call CISA held earlier today regarding the Microsoft Exchange widespread vulnerability affecting on-premise deployments, CISA pub...
Internal emails stolen in hack targeting cybersecurity company Malwarebytes Cybersecurity software firm Malwarebytes Inc. has been hacked and internal emails stolen. The hack, revealed today, is being attributed to the nation-state actor implicated in the Solar Winds Worldwide LLC breach, though Malwarebytes noted that it doesn’t use Solar Winds products itself. The intrusion vector involved attackers abusing applications with privileged access to Microsoft Office 365 and Azure environments. The emails stolen are described only as a “limited subset of internal co...