Sign in Subscribe

Microsoft

Microsoft Secure Future Initiative Progress Report (September 2024)

Microsoft Secure Future Initiative Progress Report (September 2024)

On September 23, 2024, Microsoft released its latest Secure Future Initiative (SFI) Progress Report, detailing significant strides in addressing the complex and escalating landscape of cyberattacks

Hidden Persistence Tactics: Exploiting Entra ID Administrative Units

Hidden Persistence Tactics: Exploiting Entra ID Administrative Units

On September 17, 2024, a new research paper presented at fwd Europe by security researcher Katie Knowles revealed novel techniques for maintaining hidden persistence within Microsoft Entra ID environments.

CISA Adds Nine Exploited Vulnerabilities to KEV Catalog Over Two Days

CISA Adds Nine Exploited Vulnerabilities to KEV Catalog Over Two Days

n September 17 and 18, 2024, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added nine vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.

CISA Adds Three Critical Vulnerabilities to Exploited Vulnerabilities Catalog

CISA Adds Three Critical Vulnerabilities to Exploited Vulnerabilities Catalog

On September 13 and 16, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog.

CISA Adds Four New Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA Adds Four New Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog

The inclusion of these vulnerabilities follows verified reports of active exploitation by malicious actors. The vulnerabilities affect various Microsoft systems and could have severe implications for federal agencies and organizations globally.

EDR Killer Tool ‘Poortry’ Evolving: Now Targets Critical Windows Security Components

EDR Killer Tool ‘Poortry’ Evolving: Now Targets Critical Windows Security Components

On August 27, 2024, Sophos X-Ops released an in-depth report detailing the continued evolution of the ‘Poortry’ toolset, a malicious EDR (Endpoint Detection and Response) killer used by several ransomware gangs.

Microsoft Sway Abused to Deliver Quishing Attacks

Microsoft Sway Abused to Deliver Quishing Attacks

On August 27, 2024, Netskope Threat Labs reported a surge in traffic to phishing pages hosted on Microsoft Sway, a free web-based application within the Microsoft 365 suite. These phishing campaigns predominantly employed "Quishing," a technique using QR codes