Tag: Microsoft
Perfect-ten Entra ID bug was exploited before Microsoft closed it
Microsoft says the maximum-severity Entra ID flaw is fully mitigated and needs no customer action.
$58 certificate unlocks SCCM takeover chain in XM Cyber demo
XM Cyber chains four SCCM flaws to SYSTEM using a $58 certificate.
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.
Exploited WinSock driver flaw tops Microsoft’s 398-fix August release
Microsoft's August update batch closes 398 flaws led by a WinSock driver zero-day already under attack.
Swiss federal office resets 200 accounts after SharePoint intrusion
Swiss federal IT office BIT resets roughly 200 accounts after a Microsoft SharePoint credential theft.
Malware borrows Windows Hello keys for persistent cloud access
Malware can borrow Windows Hello for Business keys to open a 90-day persistence channel into Entra ID.
Azure Cosmos DB bug could have unlocked every tenant database
Wiz found a chain it calls CosmosEscape that let a crafted Gremlin query grab a platform-wide master key.
Microsoft launches first cybersecurity AI model as part of Project Perception
Microsoft unveiled MAI-Cyber-1-Flash, its first specialized cybersecurity AI model, scoring 96% on CyberGym benchmarks and cutting vulnerability discovery costs by…