Microsoft

Oldest

Microsoft

Microsoft Power Apps Data Leak Fallout: 38 Million Records Exposed, State and City Governments Among Those Breached

August 27, 2021

Microsoft Power Apps appears to list all data types as public unless the default settings are changed. The data leak exposed several coronavirus tracing and vaccination portals, as well as at least one job applicant database that contained social security numbers.

Cyber Security News

Microsoft Warning to Customers: Azure Cosmos DB Cloud Databases May Have Been Exposed For Years

August 31, 2021

Microsoft Azure Cosmos DB cloud databases have had their read-write keys exposed by a flaw that has been present since 2019, allowing an attacker to not just access the contents but also to change or delete them.

Cyber Security News

LockFile Ransomware Attacks Exploit ProxyShell Vulnerabilities on Unpatched Microsoft Exchange Servers

September 2, 2021

CISA issues urgent alert as threat actors actively exploit ProxyShell vulnerabilities on unpatched Microsoft Exchange servers to execute LockFile ransomware attacks.

Microsoft store in New York showing authentication bypass vulnerability for Microsoft Exchange Servers

Cyber Security News

ProxyToken Authentication Bypass Flaw Allows Hackers To Copy Victims’ Emails on Vulnerable Microsoft Exchange Servers

September 8, 2021

Hackers could exploit ProxyToken authentication bypass vulnerability to steal victims’ emails and personally identifiable information from vulnerable Microsoft Exchange servers.

Cyber Security News

Azurescape Microsoft Azure Container Vulnerability Allows Attackers to Compromise Other Accounts on Public Cloud Services

September 20, 2021

Microsoft Azure cloud container vulnerability allows an attacker to escape their container and compromise other user's containers on the same cloud services by executing malicious code.

Cyber Security News

Mirai Botnet Trojans Actively Exploiting Microsoft Azure Vulnerability and Locking Other Hackers Out

September 24, 2021

Security researchers discovered that Mirai Botnet trojans actively exploited the OMIGOD Azure vulnerability and then closed the OMI SSL port 5896 to prevent others from doing the same.

Hacker typing on keyboard with floating virtual lock showing Russian hackers targeting tech supply chain

Cyber Security News

Microsoft Reports Russian Hackers Behind SolarWinds Attack Actively Targeting Tech Supply Chains, Focusing on Vulnerable Resellers

October 29, 2021

Microsoft reported that the Russian hackers behind the devastating SolarWinds attack are employing similar tactics to worm their way into tech supply chains, looking to establish long-term footholds for espionage purposes.

Microsoft office building showing source code breach by Lapsus$ hackers

Cyber Security News

Lapsus$ Hackers Accessed and Published Source Code for Microsoft Bing, Cortana, and Maps

March 31, 2022

Lapsus$ hackers compromised Microsoft's Azure DevOps Server, exfiltrated and published source code for the company's web infrastructure, websites, and mobile apps.

Google Cloud office building showing government employees view of Microsoft

Cyber Security News

Google Cloud Survey Finds Microsoft Products Unpopular With Security-minded Government Employees, but How Objective Is It?

April 6, 2022

Survey expressing anti-Microsoft sentiment was paid for in part and published by Google Cloud. It polled 2,600 currently employed residents of the US, 338 of these government employees.

Hacker working on computer showing Russian cyber attacks

Cyber Security News

Microsoft Reported Russian Cyber Attacks Were Timed To Support Military Strikes

May 2, 2022

Microsoft researchers say that Russian cyber attacks in March against a television broadcaster and a nuclear plant directly preceded military action directed at those targets.

Microsoft

Microsoft Power Apps Data Leak Fallout: 38 Million Records Exposed, State and City Governments Among Those Breached

LockFile Ransomware Attacks Exploit ProxyShell Vulnerabilities on Unpatched Microsoft Exchange Servers

ProxyToken Authentication Bypass Flaw Allows Hackers To Copy Victims’ Emails on Vulnerable Microsoft Exchange Servers

Mirai Botnet Trojans Actively Exploiting Microsoft Azure Vulnerability and Locking Other Hackers Out

Microsoft Reports Russian Hackers Behind SolarWinds Attack Actively Targeting Tech Supply Chains, Focusing on Vulnerable Resellers

Lapsus$ Hackers Accessed and Published Source Code for Microsoft Bing, Cortana, and Maps

Google Cloud Survey Finds Microsoft Products Unpopular With Security-minded Government Employees, but How Objective Is It?

Microsoft Reported Russian Cyber Attacks Were Timed To Support Military Strikes

Navigating Privacy, Cybersecurity, and the Future of AI

FTC Bans Two Data Brokers From Selling Sensitive Location Data, Setting Precedent for Unfair Practices

New York Fines Auto Insurance Companies GEICO and Traveler Nearly $12 Million Over Data Breaches

Over 2,000 Palo Alto Firewalls Compromised via Exploited Vulnerabilities