Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to ma…
Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to ma…
Microsoft Warns Users Of Excel Malware Campaign Asking Users To Solve CAPTCHA
Heads up Microsoft users! A new malware campaign is in the wild that exploits Microsoft Excel. It also requires theMicrosoft Warns Users Of Excel Malware Campa…
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild.The former, tracked…
Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules…
Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices
Microsoft has emphasized the need for securing internet-exposed operational technology (OT) devices following a spate of cyber attacks targeting such environme…
Microsoft Warns of Malvertising Scheme Spreading CACTUS Ransomware
Microsoft has warned of a new wave of CACTUS ransomware attacks that leverage malvertising lures to deploy DanaBot as an initial access vector.The DanaBot infe…
Microsoft Warns About New Sysrv Botnet Variant Attacks Web Servers
Microsoft has once again alerted users about a new Sysrv botnet variant that targets web…Microsoft Warns About New Sysrv Botnet Variant Attacks Web Servers on …
Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage ofsecurity vulnerabilitiesuncovered in the Lo…
Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware
Microsoft on Thursday warned of a "massive email campaign" that's pushing a Java-based STRRAT malware to steal confidential data from infected systems while di…
Microsoft Warns Of RevengeRAT Under Distribution Via Spearphishing Emails
Microsoft have recently shared details of a new threat in the wild aiming to steal…Microsoft Warns Of RevengeRAT Under Distribution Via Spearphishing Emails on…
This Phishing Campaign Delivers IcedID Malware Via Web Contact Forms ' Warns Microsoft
Microsoft has recently warned users of a new phishing campaign active in the wild. This…This Phishing Campaign Delivers IcedID Malware Via Web Contact Forms ' …
Microsoft Warns Of Another 'Anubis' Malware Targeting Windows
Microsoft recently warned of a new malware targeting Windows systems. Also dubbed Anubis, this Windows malware is not related toMicrosoft Warns Of Another 'Anu…
Microsoft Warns Of PonyFinal Ransomware Attacks Active In The Wild
Microsoft alerted all its users to stay vigilant with regard to PonyFinal ransomware attacks. Since the ransomware attacks are activeMicrosoft Warns Of PonyFin…
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script (VBS) files.The activity, beg…
Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware
Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware.The email campa…
Microsoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets
Microsoft on Monday warned of phishing campaigns that employ phishing emails and OAuth URL redirection mechanisms to bypass conventional phishing defenses impl…
Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups
Microsoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elev…
CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday revealed that Commvault is monitoring cyber threat activity targeting applications…
CISA Warns Of Actively Exploited Vulnerability In Microsoft Outlook
Despite the fix being available, the delays in patching devices allowed the threat actors to…CISA Warns Of Actively Exploited Vulnerability In Microsoft Outloo…
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastru…
Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector
Microsoft has revealed that a financially motivated threat actor has been observed using a ransomware strain called INC for the first time to target the health…
Microsoft Warns: North Korean Hackers Turn to AI-Fueled Cyber Espionage
Microsoft has revealed that North Korea-linked state-sponsored cyber actors have begun to use artificial intelligence (AI) to make their operations more effect…
CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting Microsoft Sharepoint Server to its Known Exploited Vulnera…