Security News

Microsoft working to fix Windows 10 21H1 update install issue
2021-03-29 21:15

Microsoft is working to fix an issue causing a recently released Windows 10 21H1 build to fail to install for customers enrolled in the Windows Insider program. "Some Windows Insiders may experience an 0x800f081f error when attempting to install 21H1 Build 19043.906," Microsoft explained in an update added to the original KB5000842 announcement.

What's next from Microsoft, Windows 10, and Surface in 2021
2021-03-27 18:01

In 2021, Microsoft is planning to release exciting new Surface products and software updates for Windows 10. Windows 10 21H1. The first update of the year is Windows 10's Spring 2021 Update "21H1" and it's essentially based on version 2004 and version 20H2, and it'll be delivered via an enablement package.

Microsoft: Black Kingdom ransomware group hacked 1.5K Exchange servers
2021-03-26 16:03

Microsoft has discovered web shells deployed by Black Kingdom operators on approximately 1,500 Exchange servers vulnerable to ProxyLogon attacks. More than 30 Black Kingdom submissions coming directly from impacted mail servers have been added to ransomware identification site ID Ransomware starting on March 18.

Microsoft: Black Kingdom ransomware hacked 1.5K Exchange servers
2021-03-26 16:03

Microsoft has discovered web shells deployed by Black Kingdom operators on approximately 1,500 Exchange servers vulnerable to ProxyLogon attacks. More than 30 Black Kingdom submissions coming directly from impacted mail servers have been added to ransomware identification site ID Ransomware starting on March 18.

Microsoft releases Windows 10 SSU to fix security update issue
2021-03-26 14:52

Microsoft has released the Windows 10 1909 KB5000850 cumulative update preview and a new KB5001205 Servicing Stack Update that resolves a Secure Boot vulnerability. The KB5001205 Servicing Stack Update will automatically be installed by Windows Update to improve the update experience.

Windows 10 ISO installs may fail to replace Microsoft Edge Legacy
2021-03-25 21:23

Microsoft has addressed a known issue causing the new Microsoft Edge web browser not to install from custom Windows 10 installation media including updates released on Thursday, March 25. Microsoft Edge Legacy is also being removed if using Windows 10 install media bundling the KB5000850 non-security release preview update for Windows 10 1909 and Windows Server 1909.

Microsoft Offers Up To $30K For Teams Bugs
2021-03-25 20:04

Microsoft wants to send the message the company is serious about the security of its popular Teams desktop application and it's willing to put some cash behind the talk. A new bug-bounty program offers up to $30,000 for security vulnerabilities, with top payouts going to those with the most potential to expose Teams user data.

Microsoft Offers Up to $30,000 for Vulnerabilities in Teams Desktop Client
2021-03-25 12:31

Microsoft on Wednesday announced that its bug bounty programs now also cover the desktop client of its Teams business communications platform. The tech giant is offering rewards for vulnerabilities in the Teams desktop client as part of its Application Bounty Program, which will feature additional app-related bounties in the future.

Microsoft offers rewards for security bugs in Microsoft Teams
2021-03-25 10:59

Microsoft is starting a new Applications Bounty Program, and the first application that they want researchers to find bugs in is Microsoft Teams, its popular business communication platform. Microsoft Teams offers workspace chat, VoIP and videoconferencing, file sharing through chats, and meetings.

Black Kingdom Ransomware Hunting Unpatched Microsoft Exchange Servers
2021-03-25 05:05

More than a week after Microsoft released a one-click mitigation tool to mitigate cyberattacks targeting on-premises Exchange servers, the company disclosed that patches have been applied to 92% of all internet-facing servers affected by the ProxyLogon vulnerabilities. According to telemetry data from RiskIQ, there are roughly 29,966 instances of Microsoft Exchange servers still exposed to attacks, down from 92,072 on March 10.