22 July 2022

microsoft

Microsoft appears to be rolling back Office Macro blocking Microsoft
3 min read

Microsoft appears to be rolling back Office Macro blocking

RiSec.Mitch 11 July 2022
We’re seeing several reports indicating that Microsoft may have rolled back its decision to block Macros in Office. Currently, no official statement exists—the reports rely on a post by a Microsoft employee in the replies from the original article where the plan to block macros was announced. Earlier this year, Microsoft decided to disable macros downloaded from the Internet in five Office apps, by default. Users trying to open files downloaded from the Internet that contained macros would see a message, with a link to an article explaining the block. SECURITY RISK: Microsoft...
Continue Reading
Don’t wait to install the June Windows update — it fixes a major security bug Microsoft
2 min read

Don’t wait to install the June Windows update — it fixes a major security bug

RiSec.n0tst3 15 June 2022
Chinese hackers have already taken advantage of the flaw Microsoft has patched a Windows vulnerability that hackers are actively exploiting. If you own a system that uses Windows 7 and up, you’ll want to update your computer as soon as possible (via Bleeping Computer). The security flaw, called Follina (CVE-2022-30190) by researchers, lets bad actors hijack users’ computers through programs like Microsoft Word. Security researchers have been aware of the threat since late May, but Microsoft reportedly dismissed their initial findings. In an attack documented by security company Proofpoint, hackers associated with the Chinese government...
Continue Reading
Microsoft Warning: Some files might not be deleted when you reset a Windows PC files might not be deleted when you reset a Windows PC
3 min read

Microsoft Warning: Some files might not be deleted when you reset a Windows PC

RiSec.n0tst3 28 February 2022
Watch out when handing an old Windows PC to a new owner after resetting it. Some of your files could still be on there. Microsoft has warned Windows 10 and Windows 11 users that files might not be deleted after resetting the device using the “Remove everything” option.  The issue stems from Microsoft’s OneDrive cloud file service and could mean files that were synced locally remain on a computer after a local or remote reset, which admins might do before handing the device to a new owner. This issue...
Continue Reading
Microsoft Warns of ‘Ice Phishing’ Threat on Web3 and Decentralized Networks Web 3.0
3 min read

Microsoft Warns of ‘Ice Phishing’ Threat on Web3 and Decentralized Networks

RiSec.n0tst3 19 February 2022
ICE PHISHING: Microsoft has warned of emerging threats in the Web3 landscape, including “ice phishing” campaigns, as a surge in adoption of blockchain and DeFi technologies emphasizes the need to build security into the decentralized web while it’s still in its early stages. The company’s Microsoft 365 Defender Research Team called out various new avenues through which malicious actors may attempt to trick cryptocurrency users into giving up their private cryptographic keys and carry out unauthorized fund transfers. One aspect that the immutable and public blockchain enables is complete transparency, so...
Continue Reading
SpoolFool: Windows Print Spooler Privilege Escalation (CVE-2022-21999) EXPLOIT
14 min read

SpoolFool: Windows Print Spooler Privilege Escalation (CVE-2022-21999)

RiSec.n0tst3 9 February 2022
UPDATE (Feb 9, 2022): Microsoft initially patched this vulnerability without giving me any information or acknowledgement, and as such, at the time of patch release, I thought that the vulnerability was identified as CVE-2022–22718, since it was the only Print Spooler vulnerability in the release without any acknowledgement. I contacted Microsoft for clarification, and the day after the patch release, Institut For Cyber Risk and I was acknowledged for CVE-2022–21999. In this blog post, we’ll look at a Windows Print Spooler local privilege escalation vulnerability that I found and reported...
Continue Reading
Windows Privilege Elevation Exploit POC Released into The Wild Windows Privilege Elevation Exploit POC
3 min read

Windows Privilege Elevation Exploit POC Released into The Wild

RiSec.n0tst3 30 January 2022
A security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10. Windows Privilege Elevation Exploit POC Using this vulnerability, threat actors with limited access to a compromised device can easily elevate their privileges to help spread laterally within the network, create new administrative users, or perform privileged commands. The vulnerability affects all supported support versions of Windows 10 before the January 2022 Patch Tuesday updates. Researcher releases bypass to patched vulnerability As part of the...
Continue Reading
The largest DDoS to date, Microsoft mitigates a 3.47 Tbps DDoS attack largest ddos to date
3 min read

The largest DDoS to date, Microsoft mitigates a 3.47 Tbps DDoS attack

RiSec.n0tst3 27 January 2022
Microsoft announced to have mitigated a record 3.47 Tbps distributed denial of service attack targeting an Azure customer, the largest DDoS to date Microsoft announced that its Azure DDoS protection platform has mitigated a record 3.47 Tbps attack that targeted one of its customers with a packet rate of 340 million packets per second (pps). The news of the attack was reported in the “Azure DDoS Protection —2021 Q3 and Q4 DDoS attack trends.” “In November, Microsoft mitigated a DDoS attack with a throughput of 3.47 Tbps and a packet rate of 340...
Continue Reading
CISA, Microsoft Warn of Wiper Malware Amid Russia-Ukraine Tensions malware designed to destroy
6 min read

CISA, Microsoft Warn of Wiper Malware Amid Russia-Ukraine Tensions

RiSec.n0tst3 22 January 2022
The U.S. government agency overseeing cybersecurity is urging the country’s businesses and other organizations to take the necessary steps to protect their networks from any spillover that might occur from the ongoing cyberattacks aimed at Ukraine government agencies and private companies. In an alert issued this week, the Cybersecurity and Infrastructure Security Agency (CISA) cited a series of cyberattacks perpetrated against public and private Ukrainian organizations as tensions between Ukraine and Russia grow despite talks between U.S. and Russian government leaders. Government and private entities in Ukraine have been targeted...
Continue Reading
Cyberattacks on Ukrainian websites come into clearer focus as Russia tensions escalate cybersecurity
2 min read

Cyberattacks on Ukrainian websites come into clearer focus as Russia tensions escalate

RiSec.n0tst3 18 January 2022
Cybersecurity researchers shed additional light over the weekend on the cyberattacks that disabled Ukrainian government websites, as Kyiv pointed to Russia as the culprit. Microsoft and ESET both shared details on the nature of the malware that took the Ukrainian sites down. Microsoft “assesses that the malware, which is designed to look like ransomware but lacking a ransom recovery mechanism, is intended to be destructive and designed to render targeted devices inoperable rather than to obtain a ransom,” the company wrote in a blog post Saturday. However, Microsoft said it...
Continue Reading
A 9-Year-old Microsoft Flaw is Still Being Exploited By Hackers in 2022 microsoft
4 min read

A 9-Year-old Microsoft Flaw is Still Being Exploited By Hackers in 2022

RiSec.General 8 January 2022
A ZLoader campaign that began in November has infected almost 2,200 victims in 111 countries by abusing a Windows flaw that Microsoft fixed back in 2013. Hackers have long used a variety of tactics to sneak Zloader past malware detection tools. In this case, according to researchers at security firm Check Point, the attackers took advantage of a gap in Microsoft’s signature verification, the integrity check for ensuring that a file is legitimate and trustworthy. First, they’d trick victims into installing a legitimate remote IT management tool called Atera to gain access and...
Continue Reading

You may have missed

OctoBot WebInterface – Remote Code Execution (RCE) – 0.4.3 Vulnerability
5 min read

OctoBot WebInterface – Remote Code Execution (RCE) – 0.4.3

21 July 2022
Dangerous ‘Lightning Framework’ Linux malware installs rootkits, backdoors Dangerous ‘Lightning Framework’ Linux malware installs rootkits, backdoors
3 min read

Dangerous ‘Lightning Framework’ Linux malware installs rootkits, backdoors

21 July 2022
Atlassian Patches critical Confluence hardcoded credentials flaw Atlassian
3 min read

Atlassian Patches critical Confluence hardcoded credentials flaw

21 July 2022
Microsoft Teams outage also affected Microsoft 365 services Microsoft
2 min read

Microsoft Teams outage also affected Microsoft 365 services

21 July 2022
en English
af Afrikaanssq Albanianam Amharicar Arabichy Armenianaz Azerbaijanieu Basquebe Belarusianbn Bengalibs Bosnianbg Bulgarianca Catalanceb Cebuanony Chichewazh-CN Chinese (Simplified)zh-TW Chinese (Traditional)co Corsicanhr Croatiancs Czechda Danishnl Dutchen Englisheo Esperantoet Estoniantl Filipinofi Finnishfr Frenchfy Frisiangl Galicianka Georgiande Germanel Greekgu Gujaratiht Haitian Creoleha Hausahaw Hawaiianiw Hebrewhi Hindihmn Hmonghu Hungarianis Icelandicig Igboid Indonesianga Irishit Italianja Japanesejw Javanesekn Kannadakk Kazakhkm Khmerko Koreanku Kurdish (Kurmanji)ky Kyrgyzlo Laola Latinlv Latvianlt Lithuanianlb Luxembourgishmk Macedonianmg Malagasyms Malayml Malayalammt Maltesemi Maorimr Marathimn Mongolianmy Myanmar (Burmese)ne Nepalino Norwegianps Pashtofa Persianpl Polishpt Portuguesepa Punjabiro Romanianru Russiansm Samoangd Scottish Gaelicsr Serbianst Sesothosn Shonasd Sindhisi Sinhalask Slovaksl Slovenianso Somalies Spanishsu Sudanesesw Swahilisv Swedishtg Tajikta Tamilte Teluguth Thaitr Turkishuk Ukrainianur Urduuz Uzbekvi Vietnamesecy Welshxh Xhosayi Yiddishyo Yorubazu Zulu