Security News

AT&T delays Microsoft 365 email delivery due to spam wave
2024-05-09 17:58

AT&T's email servers are blocking connections from Microsoft 365 due to a "High volume" spam wave originating from Microsoft's service. Starting on Monday, AT&T customers began reporting they could no longer receive email from Microsoft 365 email addresses.

Microsoft: April Windows Server updates also cause crashes, reboots
2024-05-08 16:04

Microsoft has confirmed that last month's Windows Server security updates may also cause domain controller reboots after the Local Security Authority Subsystem Service process crashes. "In rare instances, Windows Servers running the Domain Controller role might experience Local Security Authority Subsystem Service crashes resulting in a reboot," Microsoft explains in a new update added to the Windows release health dashboard.

Microsoft tests using MT/s for memory speed in Windows 11 Task Manager
2024-05-06 17:09

Microsoft is testing showing memory speeds as MT/s rather than MHz in the Windows 11 Task Manager. MHz represents how many millions of cycles per second a memory module can perform, with each cycle being an action conducted on the memory module, such as storing and retrieving data.

Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities
2024-05-04 08:38

Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state actor known as APT28, drawing condemnation from...

Microsoft rolls out passkey auth for personal Microsoft accounts
2024-05-03 15:17

Microsoft announced that Windows users can now log into their Microsoft consumer accounts using a passkey, allowing users to authenticate using password-less methods such as Windows Hello, FIDO2 security keys, biometric data, or device PINs.Microsoft "Consumer accounts" refer to personal accounts for accessing Microsoft services and products such as Windows, Office, 365, Outlook, One Drive, Copilot, and Xbox Live.

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications
2024-05-03 12:35

Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection. This is done to "facilitate communications with command-and-control...

Microsoft, Google widen passkey support for its users
2024-05-03 11:38

Since 2013, the first Thursday in May is marked as World Password Day, a day dedicated to raising awareness about the need for using strong, unique passwords to secure out digital lives. As the FIDO Alliance noted today, World Password Day may soon need a rebrand: according to its most recent survey, 22% of respondents enabled passkeys on every account, and 61% of people familiar with passkeys say they are more convenient than passwords.

Microsoft, Google do a victory lap around passkeys
2024-05-02 23:03

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Microsoft warns of "Dirty Stream" attack impacting Android apps
2024-05-02 16:02

Microsoft has highlighted a novel attack dubbed "Dirty Stream," which could allow malicious Android apps to overwrite files in another application's home directory, potentially leading to arbitrary code execution and secrets theft. Dirty Stream allows malicious apps to send a file with a manipulated filename or path to another app using a custom intent.

Microsoft won't fix Windows 0x80070643 errors, manual fix required
2024-05-02 14:06

Microsoft has confirmed that it won't provide an automated fix for a known issue causing 0x80070643 errors when installing recent Windows Recovery Environment updates. Microsoft first acknowledged this known issue in January, days after widespread reports from Windows users of 0x80070643 errors and the installation failing.