How Microsoft tools and partners support GDPR compliance

This post is authored by Daniel Grabski,Executive Security Advisor, Microsoft Enterprise Cybersecurity Group. As an Executive Security Advisor for enterprises in Europe and the Middle East, I regularly engage with Chief Information Security Officers CISOs, Chief Information Officers CIOs and Data...

preise-365.de XSS vulnerability

Open Bug Bounty ID: OBB-455383 Description| Value ---|--- Affected Website:| preise-365.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

365-rx.com XSS vulnerability

Open Bug Bounty ID: OBB-446648 Description| Value ---|--- Affected Website:| 365-rx.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Microsoft 365 Apps (Office 365) is Randomly Asking Users to Reactivate

After publishing Microsoft 365 Apps Office 365,users are randomly being requested to reactivate.Issue occurs randomly...

Office 365 Advanced Threat Protection defense for corporate networks against recent Office exploit attacks

The Office 365 Threat Research team has seen an uptick in the use of Office exploits in attacks across various industry sectors in recent months. In this blog, we will review several of these exploits, including a group of Office moniker exploits that attackers have used in targeted as well as...

October 10, 2017—KB4042895 (OS Build 10240.17643)

None None...

SQL Injection Vulnerability in Youkai 365 Business v1.5 System

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A SQL injection vulnerability exists in the UX365 Business v1.5 system, which is caus...

Arbitrary file deletion vulnerability in database.php of Ubiquitous 365 website classification and navigation system

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website classification navigation system database.php arbitrary file deletion...

PT-2017-4165 · Microsoft · Office 365 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook versions 2010 SP2 through 2016 Microsoft Office 365 affected versions not specified Description: The issue is related to the improper handling of objects in memory by Microsoft Outlook, allowing an attacker to execute...

When Phishing Starts from the Inside

A growing concern of security professionals is internal phishing attacks - phishing emails sent from one trusted user to another of the same organization. Internal phishing emails are used in multi-stage attacks in which an email account is owned either by controlling the users device with...

The New Email Security Technologies Powered by XGen™

Today we are excited to introduce new email security technologies powered by XGen™ and a new product, Smart Protection for Office 365. This new service combines the advantages of both an email gateway with an API service integrated solution to provide complete threat protection for Microsoft Offi...

优客365存储型XSS

在优客365的2.9版本，网站提交处的信息输入存在存储型XSS ./member/?mod=website&act=add 存在存储型xss 问题代码在./member/module/website.php 由图可见，filterwords没有进行过滤...

September 20, 2017 – Morning Cyber Coffee Headlines – “Pizza” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! September 20, 2017 - Headlines Carbon Black in the News: Moving forward – and...

365-rx.com XSS vulnerability

Vulnerable URL: http://365-rx.com/search?q=G%22--!%3E%3CSvg/OnLoad=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 177583 VIP website status:| No...

Insider threats in your work inbox

Recently, our friends at Barracuda found a new phishing campaign that banks on the popularity of cloud services used in most businesses, such as Microsoft Office 365. According to their blog post, this latest scheme takes advantage of the natural trust employees place on messages they receive fro...

Microsoft Exchange Server End of Life (EOL) Detection

The Microsoft Exchange Server version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Preferred Guest 365 site classification navigation system HTTP_REFERER exist SQL injection vulnerability

No description provided by source...

Description of the security update for Office for Mac 2011 14.7.6: July 11, 2017

None None...

Microsoft Office 365 Enterprise E3 Insufficient Session Expiration Vulnerability

Microsoft Office 365 Enterprise E3 suffers from an insufficient session expiration vulnerability. Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration...

Microsoft Office 365 Enterprise E3 Insufficient Session Expiration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2017-011 Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration CWE-613 Risk Level: Low...