Russia Tops Nation-State Attacks
Russia is the source of the mammoth nation-state cyberattacks Microsoft has observed in the past year (58%), followed by North Korea (23%), Iran (11%), China (8%), and South Korea, Vietnam,…
Posted inSecurity
ChamelGang APT hits Russia
A new APT group dubbed Chamelgang has emerged targeting the fuel and energy complex and aviation industry in Russia, exploiting known vulnerabilities like Microsoft Exchange Server’s ProxyShell and leveraging both…
FoggyWeb Backdoored ADFS
Microsoft has published extensive information on new malware it calls FoggyWeb, deployed by Russia-linked threat actors Nobelium who are said to be behind the devastating SolarWinds supply chain attack on…
Microsoft Exchange Threat Mitigation Service
Organizations using Exchange Server will get a new automated emergency mitigation tool after installing Microsoft's September cumulative updates. This new tool, called the Microsoft Exchange Emergency Mitigation service, is an…
Critical Windows Bug !
Security researchers have found a flaw in Microsoft’s implementation of the Microsoft Windows Platform Binary Table (WPBT) mechanism, which can be exploited to compromise computers running Windows 8 and Windows…
Phishing-as-a-Service in limelight
Microsoft’s security team has detected a large-scale operation that provides built-in hosting and email-sending phishing services to cybercriminals via a portal dubbee BulletProofLink. Array of phishing templates available for evading…
Posted inAzure Security
Azure OMIGOD !
A range of Vulnerabilities in Azure remain vulnerable to exploitation as customers required to apply the patch manually. Dubbed OMIGOD, the vulnerabilities relate to the Open Manage Infrastructure agent that’s…
Microsoft Goes Passwordless
Microsoft has decided it's time to stop asking us to remember complex and unique passwords in order to access our apps and services. Starting today, no longer need a password…