PT-2025-32315 · Microsoft · M365 Copilot

Name of the Vulnerable Software and Affected Versions: Microsoft 365 Copilot affected versions not specified Description: This issue involves information disclosure within the Microsoft 365 Copilot BizChat feature. Recommendations: At the moment, there is no information about a newer version that...

KLA86377 OSI vulnerabilities in Microsoft Apps

Information disclosure vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerability to obtain sensitive information. Original advisories CVE-2025-53774 CVE-2025-53787 Related products Microsoft-Dynamics-365 CVE list CVE-2025-53774 critical CVE-2025-53787 critical ...

PT-2025-32314

Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot affected versions not specified Description This issue involves an information disclosure within the Microsoft 365 Copilot BizChat feature. Recommendations At the moment, there is no information about a newer version that...

Hackers Abuse Microsoft 365 Direct Send to Deliver Internal Phishing Emails

A new Proofpoint report reveals how attackers are using Microsoft 365's Direct Send and unsecured SMTP relays to…...

Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts

Cybersecurity researchers have detailed a new cluster of activity where threat actors are impersonating enterprises with fake Microsoft OAuth applications to facilitate credential harvesting as part of account takeover attacks. "The fake Microsoft 365 applications impersonate various companies,...

Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials

Cybersecurity researchers have disclosed details of a new phishing campaign that conceals malicious payloads by abusing link wrapping services from Proofpoint and Intermedia to bypass defenses. "Link wrapping is designed by vendors like Proofpoint to protect users by routing all clicked URLs...

Microsoft Office 365 Encryption Issue Vulnerability

Microsoft Office 365 is an office software suite product from the American company Microsoft Microsoft. Common components of this product include Word, Excel, Access, Powerpoint, FrontPage, etc. A security vulnerability exists in Microsoft Office 365. An attacker exploiting the vulnerability can...

Customer guidance for SharePoint vulnerability CVE-2025-53770

Revision Change Date 1.0 Information published 07/19/25 2.0 Clarified affected SharePoint product in summary 07/20/25 Added fix availability guidance Provided additional protections guidance regarding: Upgrade SharePoint products to supported versions if required Install July 2025 Security Update...

The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise applications relates to reading beyond the buffer limit in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise applications is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Preventing Zero-Click AI Threats: Insights from EchoLeak

A zero-click exploit called EchoLeak reveals how AI assistants like Microsoft 365 Copilot can be manipulated to leak sensitive data without user interaction. This entry breaks down how the attack works, why it matters, and what defenses are available to proactively mitigate this emerging AI-nativ...

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft 365 Apps for Enterprise package, related to the use of cryptographic algorithms containing defects, allows a hacker to circumvent security restrictions.

The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office lies in the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Office 365 (2016 Click-to-Run) RCE Vulnerability (Jul 2025)

This host is missing a critical security update according to Microsoft Office Click-to-Run update July 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Office 365 加密问题漏洞

Microsoft Office 365 is an office software suite product from the American company Microsoft Microsoft. Common components of this product include Word, Excel, Access, Powerpoint, FrontPage, etc. A security vulnerability exists in Microsoft Office 365. An attacker exploiting the vulnerability can...

Scammers Use Microsoft 365 Direct Send to Spoof Emails Targeting US Firms

Scammers are exploiting Microsoft 365 Direct Send to spoof internal emails targeting US firms bypassing security filters with…...

Exploit for Command Injection in Microsoft

CVE-2025-32711 EchoLeak Detection Tool 🔐 !PowerShellhtt...

Search Best Practices in Veeam Data Cloud for Microsoft 365

New Search Experience for Veeam Data Cloud for Microsoft 365 We are excited to announce the initial rollout of our new search feature, designed to significantly improve the speed and efficiency of your search experience. The new search supports deleted item recovery and restore point search witho...