Security


Microsoft Issues Out-of-Band 'PrintNightmare' Windows Print Spooler Patch

Microsoft on Tuesday announced the release of an "out-of-band" fix for a Windows print spooler vulnerability dubbed "PrintNightmare."

REvil Ransomware Attacks Used Zero-Day Vulnerability in Kaseya's IT Management Software

A ransomware attack leveraging a zero-day vulnerability in Kaseya's VSA management solution may have affected about 60 managed service providers (MSPs) and almost 1,500 of their business customers.

Microsoft Defender for Endpoint Touted in Netgear Router Flaw Discovery

Microsoft on Wednesday described its discovery of a side-channel attack on Netgear DGN-2200v1 wireless home DSL routers that enabled authentication bypass.

Microsoft's June Windows Print Spool Patch Doesn't Block Remote Code Execution Attacks

An "Important"-rated Windows print spool vulnerability (CVE-2021-1675), addressed by Microsoft via its June 8 security patch bundle, has emerged more recently as being subject to active attacks.

June Windows Security Patch Blocked for Some Configuration Manager WSUS Users

Microsoft warned users of Microsoft Endpoint Configuration Manager in conjunction with Windows Server Update Services about a "known issue" that blocks the installation of a June Windows security patch.

Microsoft Defender for Endpoint Can Now Detect Unmanaged Devices

Microsoft on Tuesday announced the commercial release of an unmanaged device detection feature when using the Microsoft Defender for Endpoint product.

Microsoft Adds Stop-Gap Tool, but Still Plans To End Exchange Online Basic Authentication

Microsoft on Wednesday announced another update on its plans to end the use of Basic Authentication with the Exchange Online e-mail messaging service.

Microsoft Defender for Endpoint Gets Jailbreak Protections and More

Microsoft Defender for Endpoint got several improvements at the "general availability" commercial-release stage, according to a Monday announcement by Microsoft.

Microsoft Defender for Endpoint Gets VPN Tunnel Support for Android Devices

Microsoft announced a couple of "general availability" milestones on Monday for organizations using Microsoft Defender for Endpoint to protect Android devices.

Exchange Server June Update Getting Delayed To Bolster Security

Microsoft on Friday announced a coming delay in delivering this month's Exchange Server cumulative update (CU), which is being done to improve the security of those e-mail messaging products.

Microsoft Previews Azure Firewall Threat Tracking in Azure Sentinel

Microsoft this week announced a preview of Azure Firewall integration in its Azure Sentinel security information and event management (SIEM) solution.

Microsoft Goes Public on Having an Emergency Security Compromise Team

Microsoft on Wednesday disclosed that it has a "Compromise Recovery Security Practice" (CRSP) team that helps organizations deal with major post-breach software security incidents, such as ransomware attacks.

Microsoft June Security Patch Bundle Addresses 49 Vulnerabilities

Microsoft released patches for 49 common vulnerabilities and exposures (CVEs) in its products in June, according to security researcher counts.

STG Frees Mandiant with $1.2B Agreement To Acquire FireEye Security Products

The Symphony Technology Group (STG) and security solutions company FireEye announced the sale this week of FireEye's security products to STG for $1.2 billion.

Azure Defender Getting Linux Server Protection Capability

Azure Defender will be able to protect Linux servers via a capability at the preview stage arriving on June 14, Microsoft announced on Thursday.

Hardware

Microsoft Buys ReFirm Labs To Bolster Azure Defender for IoT

Microsoft announced the acquisition of ReFirm Labs, a provider of security solutions for organizations using Internet of Things (IoT) and network edge devices.

Automatic HTTPS Preview for Microsoft Edge Browser Now Available

Microsoft on Tuesday announced an Automatic HTTPS preview feature for the Microsoft Edge browser.

Microsoft Points to Nobelium in USAID Spearphishing Attacks

Microsoft announced on Thursday that about 3,000 e-mail accounts were recently targeted by the Nobelium espionage group, with attacks spiking on May 25.

Microsoft Defender for Endpoint Adds Linux Support

Microsoft announced last week that the Threat and Vulnerability Management capabilities in its Microsoft Defender for Endpoint security solution now protects Linux-based devices.

Microsoft Previews Solutions Marketplace and Teams Support for Azure Sentinel

Microsoft last week announced a bunch of Azure Sentinel enhancements, which are at the preview stage right now.

Subscribe on YouTube