Browsing tag

Microsoft

WannaCry Ransomware Attackers are sending new message to victims

The WannaCry ransomware attack is still infecting unsuspecting users, hospitals, and businesses around the world. While some users on Twitter are claiming they have already paid victims a massive amount of ransom money and are still waiting for the decryption key; the cyber criminals behind the whole campaign are still sending new messages in the […]

10 Crucial Security Tips to Reduce Data Loss in Microsoft Office 365

The protection of crucial data is highly important. Microsoft Office 365 has a data loss feature that highly secures your data. According to research, four in every ten organizations are currently using or planning to implement this application. It’s no wonder Microsoft has deemed it necessary to implement the right safety measures for all of […]

Uiwix, yet another ransomware like WannaCry – only more dangerous

In the last few days, the internet has been caught off guard with numerous updates being posted regarding the sprawling effects of the WannaCry ransomware that exploited the vulnerabilities in Microsoft’s Windows operating system to hack more than 75,000 computers and counting last Friday. Nevertheless, it seems like the worst is yet to come. In […]

Ubuntu Linux Arrives In Windows Store, Fedora And openSUSE Also Getting Support

Last year, at Build 2016, Microsoft surprised the world by announcing that the developers can install Bash shell on Windows 10. This was done with the help of Windows Subsystem for Linux, which is a compatibility layer for running Linux binaries on Windows. This feature was first launched with Windows 10 Anniversary Update. To make this […]

Microsoft Warn Users of Cyber Attacks on Windows Software Update System

Earlier this week, the research team which is part of Windows Defender Advanced Threat Protection system, detected several attacks being carried out against a software’s update system whose name has not yet been revealed – All that is known about the software is that it is a well-known editing application and that the creator or vendor […]

SKYPE FIXES ‘SPYKE’ CREDENTIAL PHISHING REMOTE EXECUTION BUG

Microsoft recently fixed a vulnerability in its video chat and messaging app Skype that could have allowed an attacker to execute code on the system it was running on, phish Skype credentials and crash the application. Zacharis Alexandros, an independent researcher who’s also with the ‎European Union Agency for Network and Information Security a/k/a ENISA discovered […]

MICROSOFT PATCHES THREE VULNERABILITIES UNDER ATTACK

Microsoft today patched a zero-day Word vulnerability that has been publicly attacked along with deploying fixes for Internet Explorer, Microsoft Edge and Windows 10. In all, nine Microsoft products received updates totaling 45 unique CVEs. Three of the vulnerabilities among Tuesday’s updates, according to Microsoft, are under active attack.   One of the bugs (CVE-2017-0199) […]

Hackers are Exploiting New Microsoft Office Vulnerability to Drop Malware

Researchers have detected a new zero-day bug which uses a previously unknown flaw in Microsoft Word. The bug allows attackers to send malicious document files to users and hackers have started sending out emails with fake Word documents which when downloaded and opened, start working in the background on downloading different kinds of malware and therefore spread […]

Critical Office Zero-Day Attacks Detected in the Wild

At McAfee, we have put significant efforts in hunting attacks such as advanced persistent threats and “zero days.” Yesterday, we observed suspicious activities from some samples. After quick but in-depth research, this morning we have confirmed these samples are exploiting a vulnerability in Microsoft Windows and Office that is not yet patched. This blog post […]

Unpatched For Years, MS Word Zero-Day Attacks Even If Your Windows Is Fully Updated

Short Bytes: An unpatched 0-day bug affects all the versions of MS Office and Windows, including Office 2016 running on Windows 10. An attacker can make a user download malicious word file as an email attachment, execute codes, and install malware on victim’s system. Microsoft is currently working on an official fix for the vulnerability. Researchers […]

Around 8 million websites affected by a critical Buffer Overflow Vulnerability resides in IIS 6.0

Internet Information Services is an extensible web server made by Microsoft for use with the Windows NT family.IIS can help you achieve better performance, reliability, scalability, and security for your websites. The IIS6.0 zero-day flaw was found by two scientists with the Information Security Lab and School of Computer Science and Engineering, South China University of […]

Microsoft: We Won’t Help the Government Hack Our Users

Redmond pledges to defend users against government hacks. Microsoft is one of the companies that brought the US government to court for data request orders which it claimed violated the law, and now the software giant is reiterating its support for protecting users by saying that it doesn’t plan to collaborate with authorities on hacking […]

How To Disable The Irritating OneDrive Ads In Windows 10 File Explorer?

Short Bytes: Some users have started to see intrusive OneDrive advertisements in Windows 10’s File Explorer offering 1TB OneDrive storage along with the Office 365 products. It’s not surprising given Microsoft’s history of shamelessly promoting products in the past. The annoying advertisement can be disabled using the File Explorer options in the Windows 10. Microsoft […]

New (but Old) Technique Hijacks User Sessions on All Windows Versions

A security researcher has detailed a way to log into any account on the same computer, even without knowing its password. The trick works on all Windows versions, doesn’t require special privileges, and the researcher can’t figure out if it’s a Windows feature or security flaw. The researcher, Alexander Korznikov, calls the attack a “privilege […]

Ransomware operators are hiding malware deeper in installer packages

We are seeing a wave of new NSIS installers used in ransomware campaigns. These new installers pack significant updates, indicating a collective move by attackers to once again dodge AV detection by changing the way they package malicious code. These changes are observed in installers that drop ransomware like Cerber, Locky, and others. Cybercriminals have […]

Munich Is Ditching Linux And Adopting Windows For “No Technical Reason”

Short Bytes: Back in February, Munich general council backed a proposal to look into the cost and possibility of building a Windows 10 client. Munich’s IT services provider chief has said that the political decision to ditch Linux and adopt Windows operating system isn’t backed by some compelling technical reason. He added that all the problems […]

Microsoft Bug Bounty Program: Report Vulnerabilities, Get up to $30,000

For the last couple of year, Google has been releasing details about unpatched vulnerabilities discovered by its researchers in Microsoft’s products. Now, to save itself from further embarrassment Microsoft has launched its bug bounty program in which the company is willing to pay up to $30,000 to hackers and security researchers for reporting flaws in […]