Microsoft discovers threat actor targeting SolarWinds Serv-U software with 0-day exploit

Microsoft has detected a 0-day remote code execution exploit being used to attack SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group operating out of China, based on...

PT-2021-5600 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Word versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to insufficient inp...

Veeam Backup for Microsoft 365 5c cumulative patch KB4187

This update has been superseded by Veeam Backup for Microsoft 365 5d. Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.2.22 prior to installing this cumulative patch KB4187. You can check this under Help and Support About in Veeam Backup for Microsoft 365...

Gundog - Guided Hunting In Microsoft 365 Defender

Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundog will then hunt for as much as possible associated data. It does not give...

Behind the scenes of business email compromise: Using cross-domain threat data to disrupt a large BEC campaign

Microsoft 365 Defender researchers recently uncovered and disrupted a large-scale business email compromise BEC infrastructure hosted in multiple web services. Attackers used this cloud-based infrastructure to compromise mailboxes via phishing and add forwarding rules, enabling these attackers to...

Behind the scenes of business email compromise: Using cross-domain threat data to disrupt a large BEC campaign

Microsoft 365 Defender researchers recently uncovered and disrupted a large-scale business email compromise BEC infrastructure hosted in multiple web services. Attackers used this cloud-based infrastructure to compromise mailboxes via phishing and add forwarding rules, enabling these attackers to...

Behind the scenes of business email compromise: Using cross-domain threat data to disrupt a large BEC campaign

Microsoft 365 Defender researchers recently uncovered and disrupted a large-scale business email compromise BEC infrastructure hosted in multiple web services. Attackers used this cloud-based infrastructure to compromise mailboxes via phishing and add forwarding rules, enabling these attackers to...

Behind the scenes of business email compromise: Using cross-domain threat data to disrupt a large BEC campaign

Microsoft 365 Defender researchers recently uncovered and disrupted a large-scale business email compromise BEC infrastructure hosted in multiple web services. Attackers used this cloud-based infrastructure to compromise mailboxes via phishing and add forwarding rules, enabling these attackers to...

Microsoft Office Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2013 Service Pack 1 64-bit editions,Microsoft Office Web Apps Server...

Microsoft Office 代码注入漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and edition...

odix and Microsoft: Protecting users against malware attacks with free FileWall license

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. The fight against malware has become the epic battle of our generation, placing businesses of all sizes against a never-ending stream of hackers and zero-day attacks bent on...

The vulnerability affects components of Microsoft Office Graphics packages, Microsoft Office programs, Microsoft 365 Apps for Enterprise, and Microsoft Word, allowing attackers to execute arbitrary code.

The vulnerability of components of the Microsoft Office Graphics package, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Word is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a specially...

How to Configure Bypass Rules for Veeam Backup for Microsoft 365 Internet Proxy Setting

Purpose This article describes how to configure a bypass list for the Internet Proxy configured within Veeam Backup for Microsoft 365. Solution This procedure restarts services on the controller and backup proxies. Ensure that no backup or restore tasks are active before beginning. How it Works T...

Email Campaign Spreads StrRAT Fake-Ransomware RAT

An email campaign is delivering a Java-based remote access trojan RAT that can not only steal credentials and take control of systems, but also presents as fake ransomware, Microsoft researchers have discovered. The Microsoft Security Intelligence MSI team has outlined details of a “massive email...

Exchange backup fails after upgrading to Veeam Backup for Microsoft 365 v5

Challenge After upgrading Veeam Backup for Microsoft 365 to v5, backup of Exchange Online data may fail with " Unauthorized 401" error. The issue affects organizations using Modern authentication and legacy protocols with application secret. Cause Starting v5 Veeam Backup for Microsoft 365 has...

SimuLand: Understand adversary tradecraft and improve detection strategies

At Microsoft, we continuously collaborate with customers and the InfoSec community to learn more about the latest adversary tradecraft so that we can improve our detection strategies across all our security services. Even though those detections are already built into our products, and protecting...

Microsoft, Google Clouds Hijacked for Gobs of Phish

Threat actors are cashing in on the rapid shift to cloud-based business services during the pandemic, by hiding behind ubiquitous, trusted services from Microsoft and Google to make their email phishing scams look legit. And it’s working. In fact, in the first three months of 2021 alone,...

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A resource management error vulnerability exists in Microsoft Office. The following products...

Microsoft Office Word 代码注入漏洞

Microsoft Word is a word processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Office Word. The following products and editions are affected: Microsoft Word 2016 32-bit edition,Microsoft Word 2016 64-bit edition,Microsoft Office...

Veeam Backup for Microsoft 365 5b cumulative patch KB4158

This update has been superseded by Veeam Backup for Microsoft 365 5с Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.1.179, 5.0.1.207, or 5.0.1.225 prior to installing this cumulative patch KB4158. You can check this under Help and Support About in Veeam Backu...