789 matches found
Microsoft Security delivers new multicloud capabilities
In times of great change, challenges and opportunities can be found in many directions. This is certainly true in IT and cybersecurity. Today, while navigating a pandemic, frequent supply chain shocks, and global talent shortages, organizations around the world are forced to confront sophisticate...
Microsoft Security delivers new multicloud capabilities
In times of great change, challenges and opportunities can be found in many directions. This is certainly true in IT and cybersecurity. Today, while navigating a pandemic, frequent supply chain shocks, and global talent shortages, organizations around the world are forced to confront sophisticate...
Remote sessions are abruptly disconnected on Endpoints for Mac
Citrix Virtual Apps and Desktops sessions get abruptly disconnected on endpoints for Mac, which use Microsoft Defender...
Detect active network reconnaissance with Microsoft Defender for Endpoint
The Microsoft Compromise Recovery Security Practice has observed how the security industry has evolved over the last few years as consumers, businesses, and industry professionals continue to adapt to the changing landscape. We have seen the emergence of new frameworks, such as the Cybersecurity...
The evolution of a Mac trojan: UpdateAgent’s progression
Our discovery and analysis of a sophisticated Mac trojan in October exposed a year-long evolution of a malware family—and depicts the rising complexity of threats across platforms. The trojan, tracked as UpdateAgent, started as a relatively basic information-stealer but was observed distributing...
Measure the effectiveness of your Microsoft security with AttackIQ
This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. To improve an organization’s cybersecurity readiness, you need to test that your detection and prevention technologies work as intended and that your security program is performing a...
The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to improper code generation, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
New macOS vulnerability, “powerdir,” could lead to unauthorized user data access
Following our discovery of the “Shrootless” vulnerability, Microsoft uncovered a new macOS vulnerability, “powerdir,” that could allow an attacker to bypass the operating system’s Transparency, Consent, and Control TCC technology, thereby gaining unauthorized access to a user’s protected data. We...
PVS and MCS Devices Cache Disk Quickly Consumed By NTFSDisableLastAccessUpdate
- A Citrix Provisioned VDI, both MCS and PVS provisioned devices may consume most of its available cache disk space soon after boot, with or without any user interaction. - A machine left unattended appears to be consuming cache disk space while Procmon and Resource Monitor do not show...
Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-03998)
Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...
Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-04001)
Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT is vulnerable to a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...
Microsoft Defender for IoT Information Disclosure Vulnerability
Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from an information disclosure vulnerability. No detailed vulnerability details are currently available...
KLA12393 RCE vulnerability in Microsoft System Center
Remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-44228 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such...
CVE-2021-43888
Microsoft Defender for IoT Information Disclosure Vulnerability...
CVE-2021-43889
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-43882
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-43889
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-43882
Microsoft Defender for IoT Remote Code Execution Vulnerability...