Using Microsoft 365 Defender to protect against Solorigate

Microsoft security researchers continue to investigate and respond to the sophisticated cyberattack known as Solorigate also referred to as Sunburst by FireEye involving a supply chain compromise and the subsequent compromise of cloud assets. While the related investigations and impact assessment...

Using Microsoft 365 Defender to protect against Solorigate

Microsoft security researchers continue to investigate and respond to the sophisticated cyberattack known as Solorigate also referred to as Sunburst by FireEye involving a supply chain compromise and the subsequent compromise of cloud assets. While the related investigations and impact assessment...

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft 365 Apps for Enterprise suite, related to access control deficiencies, allows attackers to bypass existing security measures.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft 365 Apps for Enterprise suite is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to bypass existing security measures...

PT-2020-5263 · Microsoft · 365 Apps +2

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to errors in the code of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps. It allows a remote attacker to disclose protected information. There is ...

Release Information for Veeam Backup for Microsoft 365 5a

This update has been superseded by Release Information for Veeam Backup for Microsoft 365 5b. Requirements Please confirm that you are running one of the following versions of Veeam Backup for Microsoft 365 before upgrading to 5a: 3.0 build 3.0.0.422 4.0 build 4.0.0.1345 4a builds 4.0.0.1553,...

Veeam Backup for Microsoft 365 4c cumulative patch KB4083

This patch has been superseded by Veeam Backup for Microsoft 365 4c cumulative patch KB4099. Requirements Please confirm you are running Veeam Backup for Microsoft 365 builds 4.0.1.531 or 4.0.1.545 prior to installing this cumulative patch KB4083. You can check this under Help and Support About i...

PT-2020-5238 · Microsoft · Office Web Apps +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft 365 Apps for...

Microsoft Office PowerPoint Security Vulnerability

Microsoft Office PowerPoint is a software used to create, presentations PPT by Microsoft Corporation USA. A security vulnerability exists in Microsoft Office PowerPoint. The following products and editions are affected:Microsoft PowerPoint 2016 64-bit edition,Microsoft PowerPoint 2010 Service Pac...

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Outlook. The following products and editions are affected:Microsoft Outlook 2013 RT Service Pack 1,Microsoft Outlook 2010 Service Pack 2 64-bit...

Veeam Backup for Microsoft 365 5.0 cumulative patch KB4078

Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.0.1061 or 5.0.0.1063 prior to installing this cumulative patch KB4078. You can check this by clicking Help and Support About in the main menu of the Veeam Backup for Microsoft 365 console. After upgrading, your...

Release Information for Veeam Backup for Microsoft 365 5.0

Requirements Please confirm that you are running one of the following versions of Veeam Backup for Microsoft 365 before upgrading to 5.0: 3.0 build 3.0.0.422 4.0 build 4.0.0.1345 4a builds 4.0.0.1553, 4.0.0.1580 4b builds 4.0.0.2516, 4.0.0.2549 4c builds 4.0.1.519, 4.0.1.531, 4.0.1.545 You can...

Zerologon is now detected by Microsoft Defender for Identity

There has been a huge focus on the recently patched CVE-2020-1472 Netlogon Elevation of Privilege vulnerability, widely known as ZeroLogon. While Microsoft strongly recommends that you deploy the latest security updates to your servers and devices, we also want to provide you with the best...

Zerologon is now detected by Microsoft Defender for Identity

There has been a huge focus on the recently patched CVE-2020-1472 Netlogon Elevation of Privilege vulnerability, widely known as ZeroLogon. While Microsoft strongly recommends that you deploy the latest security updates to your servers and devices, we also want to provide you with the best...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, and Microsoft 365 Apps for Enterprise, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Microsoft 365 Apps for Enterprise, is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, and Microsoft 365 Apps for Enterprise, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Microsoft 365 Apps for Enterprise, is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Extend data loss prevention to your devices with Microsoft Endpoint Data Loss Prevention, now generally available

Microsoft Endpoint Data Loss Prevention Endpoint Data Loss Prevention DLP | What it is and how to set it up in Microsoft 365. Watch today Managing and protecting data is critical to any organization. Data is growing exponentially, and remote work is making it even harder to manage risks around...

Extend data loss prevention to your devices with Microsoft Endpoint Data Loss Prevention, now generally available

Microsoft Endpoint Data Loss Prevention Endpoint Data Loss Prevention DLP | What it is and how to set it up in Microsoft 365. Watch today Managing and protecting data is critical to any organization. Data is growing exponentially, and remote work is making it even harder to manage risks around...

PT-2020-4759 · Microsoft · Office +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the improper handling of objects in memory...

PT-2020-4760 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the improper handling of objects in memory...

How to Create a Secure IAM Policy for Connection to S3 Object Storage

Purpose This article documents how to create a secure IAM policy to connect to the S3 bucket used as an object storage repository in Veeam Backup for Microsoft 365 for storing backup data. Solution The following permissions will allow Veeam Backup for Microsoft 365 to access the S3 bucket to save...