Security News

Microsoft says Auto HDR causes game freezes on Windows 11 24H2
2024-12-19 16:23

​Microsoft is now blocking Windows 11 24H2 upgrades on systems with Auto HDR enabled due to a compatibility issue that causes game freezes. [...]

CISA orders federal agencies to secure their Microsoft cloud environments
2024-12-19 12:58

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a binding operational directive (BOD 25-01) requiring federal civilian agencies to secure their (Microsoft) cloud...

HubSpot phishing targets 20,000 Microsoft Azure accounts
2024-12-18 18:41

A phishing campaign targeting automotive, chemical, and industrial manufacturing companies in Germany and the UK is abusing HubSpot to steal Microsoft Azure account credentials. [...]

Malicious Microsoft VSCode extensions target devs, crypto community
2024-12-18 17:47

Malicious Visual Studio Code extensions were discovered on the VSCode marketplace that download heavily obfuscated PowerShell payloads to target developers and cryptocurrency projects in supply...

Microsoft won't let customers opt out of passkey push
2024-12-18 17:30

Enrolment invitations will continue until security improves Microsoft last week lauded the success of its efforts to convince customers to use passkeys instead of passwords, without actually...

CISA orders federal agencies to secure Microsoft 365 tenants
2024-12-17 20:01

​CISA has issued this year's first binding operational directive (BOD 25-01), ordering federal civilian agencies to secure their Microsoft 365 cloud environments by implementing a list of required...

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware
2024-12-17 16:35

A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate. "An attacker used social engineering via a Microsoft Teams...

Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks
2024-12-17 14:11

A new phishing campaign has been observed employing tax-themed lures to deliver a stealthy backdoor payload as part of attacks targeting Pakistan. Cybersecurity company Securonix, which is...

Week in review: Microsoft fixes exploited 0-day, top cybersecurity books for your holiday gift list
2024-12-15 09:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes exploited zero-day (CVE-2024-49138) On December 2024 Patch Tuesday, Microsoft...