Security News

Microsoft tests using MT/s for memory speed in Windows 11 Task Manager
2024-05-06 17:09

Microsoft is testing showing memory speeds as MT/s rather than MHz in the Windows 11 Task Manager. MHz represents how many millions of cycles per second a memory module can perform, with each cycle being an action conducted on the memory module, such as storing and retrieving data.

Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities
2024-05-04 08:38

Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state actor known as APT28, drawing condemnation from...

Microsoft rolls out passkey auth for personal Microsoft accounts
2024-05-03 15:17

Microsoft announced that Windows users can now log into their Microsoft consumer accounts using a passkey, allowing users to authenticate using password-less methods such as Windows Hello, FIDO2 security keys, biometric data, or device PINs.Microsoft "Consumer accounts" refer to personal accounts for accessing Microsoft services and products such as Windows, Office, 365, Outlook, One Drive, Copilot, and Xbox Live.

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications
2024-05-03 12:35

Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection. This is done to "facilitate communications with command-and-control...

Microsoft, Google widen passkey support for its users
2024-05-03 11:38

Since 2013, the first Thursday in May is marked as World Password Day, a day dedicated to raising awareness about the need for using strong, unique passwords to secure out digital lives. As the FIDO Alliance noted today, World Password Day may soon need a rebrand: according to its most recent survey, 22% of respondents enabled passkeys on every account, and 61% of people familiar with passkeys say they are more convenient than passwords.

Microsoft, Google do a victory lap around passkeys
2024-05-02 23:03

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Microsoft warns of "Dirty Stream" attack impacting Android apps
2024-05-02 16:02

Microsoft has highlighted a novel attack dubbed "Dirty Stream," which could allow malicious Android apps to overwrite files in another application's home directory, potentially leading to arbitrary code execution and secrets theft. Dirty Stream allows malicious apps to send a file with a manipulated filename or path to another app using a custom intent.

Microsoft won't fix Windows 0x80070643 errors, manual fix required
2024-05-02 14:06

Microsoft has confirmed that it won't provide an automated fix for a known issue causing 0x80070643 errors when installing recent Windows Recovery Environment updates. Microsoft first acknowledged this known issue in January, days after widespread reports from Windows users of 0x80070643 errors and the installation failing.

Microsoft: April Windows Server updates cause NTLM auth failures
2024-05-01 15:17

Microsoft has confirmed customer reports of NTLM authentication failures and high load after installing last month's Windows Server security updates. According to a new entry added to the Windows health dashboard on Tuesday, this known issue will only affect Windows domain controllers in organizations with a lot of NTLM traffic and few primary DCs. The list of impacted Windows versions and buggy security updates includes Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, and Windows Server 2008.

Microsoft says April Windows updates break VPN connections
2024-05-01 14:07

Microsoft has confirmed that the April 2024 Windows security updates break VPN connections across client and server platforms. The company explains on the Windows health dashboard that "Windows devices might face VPN connection failures after installing the April 2024 security update or the April 2024 non-security preview update."