3042 matches found
EUVD-2024-43921
Malicious code in bioql PyPI...
Migration to Unified Veeam Data Cloud FAQ
Below are the most commonly asked questions. What changed with the Veeam Data Cloud for Microsoft 365 experience? Veeam transitioned customers to the Veeam Data Cloud Platform, a unified multi-workload interface. This new experience allows customers to manage Microsoft 365, Entra ID, Salesforce,...
AI vs. AI: Detecting an AI-obfuscated phishing campaign
Microsoft Threat Intelligence recently detected and blocked a credential phishing campaign that likely used AI-generated code to obfuscate its payload and evade traditional defenses. Appearing to be aided by a large language model LLM, the activity obfuscated its behavior within an SVG file,...
Microsoft Fixed Entra ID Vulnerability Allowing Global Admin Impersonation
Microsoft patched an Entra ID vulnerability that let attackers impersonate Global Admins across tenants, risking full Microsoft 365 and Azure takeover...
Disrupted phishing service was after Microsoft 365 credentials
Microsoft and Cloudflare have disrupted a Phishing-as-a-Service operation, known as RaccoonO365. The primary goal of RaccoonO365 or Storm-2246 as Microsoft calls it was to rent out a phishing toolkit that specialized in stealing Microsoft 365 credentials. They were successful in at least 5,000...
How to offboard a single protection unit from an Express backup policy in Veeam Data Cloud for M365
Challenge Issue Summary After creating an Express Protection Policy in Veeam Data Cloud for Microsoft 365, backups are retained for one year. These Express Protection Policies are built on the Microsoft 365 Backup storage backend. Over time, a situation may arise where you need to offboard a sing...
CVE-2025-4234
A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these...
CVE-2025-4234 Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these...
CVE-2025-4234 Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these...
Palo Alto Networks Cortex XDR Microsoft 365 安全漏洞
Palo Alto Networks Cortex XDR Microsoft 365 is a security integration solution from Palo Alto Networks, Inc. A security vulnerability exists in Palo Alto Networks Cortex XDR Microsoft 365 that stems from the possibility that user credentials could be exposed in application logs, potentially leadi...
PT-2025-37083
Name of the Vulnerable Software and Affected Versions: Cortex XDR Microsoft 365 Defender Pack affected versions not specified Description: The Cortex XDR Microsoft 365 Defender Pack may allow cleartext exposure of credentials. The severity of this issue is low. Recommendations: At the moment, the...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2025)
This host is missing a critical security update according to Microsoft Office Click-to-Run update September 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2025-59044 Himmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf idattrmap = name the default configuration. Because Microsoft Entra ID allows multiple groups with the same...
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft's Direct Send feature to form a "highly efficient attack pipeline" in recent phishing campaigns, according to new findings from ReliaQuest. "Axios user agent activity surged 241% from June to August 2025, dwarfin...
iCloud Calendar infrastructure abused in PayPal phishing campaign
Once again, phishers are targeting PayPal users by abusing existing legitimate infrastructure. Only this time they’re not abusing PayPal’s platform, but iCloud Calendar invites. Our friends over at BleepingComputer unraveled a call-back phishing scam which was sent to one of their readers. “Pedro...
CVE-2025-55238
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability...
CVE-2025-55238
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability...
CVE-2025-55238
CVE-2025-55238 affects Microsoft Dynamics 365 FastTrack Implementation Assets. The connected sources describe an information disclosure vulnerability arising from an access control error, enabling leakage of asset information. No concrete exploit details, affected version ranges, or remediation/f...