3063 matches found
This Week in Security News: Unpatched Systems and Lateral Phishing
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about an attack against Elasticsearch that delivers backdoors as its payload. Additionally, read how cybercriminals are turning to...
Announcing the Microsoft Dynamics 365 Bounty program
One of Microsoft’s many security investments to protect customers is in the partnerships we build with the external security research community. We are excited to announce the launch of the Dynamics 365 Bounty program and welcome researchers to seek out and disclose any high impact vulnerabilitie...
Announcing the Microsoft Dynamics 365 Bounty program
One of Microsoft’s many security investments to protect customers is in the partnerships we build with the external security research community. We are excited to announce the launch of theDynamics 365 Bounty program and welcome researchers to seek out and disclose any high impact vulnerabilities...
Announcing the Microsoft Dynamics 365 Bounty program
One of Microsoft’s many security investments to protect customers is in the partnerships we build with the external security research community. We are excited to announce the launch of theDynamics 365 Bounty program and welcome researchers to seek out and disclose any high impact vulnerabilities...
Security Update for Microsoft Dynamics 365 (on-premises) (May 2019)
The version of Microsoft Dynamics 365 on-premises installed on the remote Windows host is 7.x 7.0.3.147, 8.x 8.2.6.19, 9.x 9.0.4.5. It is, therefore, affected by a security feature bypass vulnerability. An unauthenticated, remote attacker could exploit this issue, to send attachment types that ar...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2019)
This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Excel CVE-2019-1111 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Microsoft Excel CVE-2019-1112 Information Disclosure Vulnerability
Description Microsoft Excel is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft...
KLA11820 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely via special...
Office 365 Phishing Protection – Is Native Microsoft Protection Safe?
By Waqas For the last couple of years, there has been a surge in phishing attacks against businesses and unsuspecting users. What's worse is that phishing, which was previously merely a fraudulent attempt to obtain sensitive information, is now spreading malicious content including ransomware...
Breach at Cloud Solution Provider PCM Inc.
A digital intrusion at PCM Inc., a major U.S.-based cloud solution provider, allowed hackers to access email and file sharing systems for some of the company's clients, KrebsOnSecurity has learned. El Segundo, Calif. based PCM NASDAQ:PCMI is a provider of technology products, services and solutio...
Veeam Backup for Office 365 Complete Permissions
This KB is being phased out The content of this article is being transitioned to the Veeam Backup for Microsoft 365 User Guide. An up-to-date list of Required Permission is available in the Veeam Backup for Microsoft 365 User Guide. Authentication Modes Summary Depending on the Microsoft 365...
How to add SMB repository to Veeam Backup for Microsoft 365
Planned Feature Deprecation Veeam Backup for Microsoft 365 support for SMB-based repositories will be deprecated in a future version. For more information, see KB4567: Planned Veeam Backup for Microsoft 365 Feature Deprecation. Experimental Support SMB repository is considered as experimental...
Ensuring security of your Microsoft Teams apps with Microsoft Cloud App Security
Apps in Microsoft Teams allow you to leverage additional capabilities, enhance your experience, and make Teams work for you by adding your favorite Microsoft and third-party services. Today, hundreds of ecosystem apps provide a great way to enhance and customize Teams, but to enable applications...
Microsoft Office 365 (2016 Click-to-Run) Multiple RCE Vulnerabilities (Jun 2019)
This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Word CVE-2019-1035 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2019-1034 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Secure your journey to the cloud with free DMARC monitoring for Office 365
Not knowing who is sending email “from” your organization is an enormous problem for IT managers for two reasons. One problem is “shadow IT”—cloud services that employees have signed up for without IT oversight. Many of these services send mail—to employees, customers, or marketing prospects—whic...
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 (on-premises) version 8.2: May 14, 2019
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 on-premises version 8.2: May 14, 2019 INTRODUCTION Microsoft Dynamics 365 online and on-premises Update 2.6 is now available. This article describes the hotfixes and updates that are include...
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 (on-premises) version 9.0: May 14, 2019
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 on-premises version 9.0: May 14, 2019 INTRODUCTION Service Update 0.4 for Microsoft Dynamics CRM on-premises 9.0 is now available. This article describes the hotfixes and updates that are...