PT-2021-3143 · Microsoft · 365 Apps For Enterprise +3

Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Word affected versions not specified Description: The issue is related to incorrect code generation manageme...

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A resource management error vulnerability exists in Microsoft Office. The following products...

Microsoft Excel 数字错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A numeric error vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office Web Apps Server 2013...

M365_Groups_Enum - Enumerate Microsoft 365 Groups In A Tenant With Their Metadata

The allgroups.py script allows to enumerate all Microsoft 365 Groups in a Azure AD tenant with their metadata: name visibility: public or private description email address owners members Teams enabled? SharePoint URL e.g. for Teams shared files All of this, even for private Groups! Read more abou...

Meet critical infrastructure security compliance requirements with Microsoft 365

Critical infrastructure operators face a hostile cyber threat environment and a complex compliance landscape. Every operator of an industrial control system also operates an IT network to service its productivity needs. A supervisory control and data acquisition SCADA system operator of a power...

Meet critical infrastructure security compliance requirements with Microsoft 365

Critical infrastructure operators face a hostile cyber threat environment and a complex compliance landscape. Every operator of an industrial control system also operates an IT network to service its productivity needs. A supervisory control and data acquisition SCADA system operator of a power...

Abusing Replication: Stealing AD FS Secrets Over the Network

Organizations are increasingly adopting cloud-based services such as Microsoft 365 to host applications and data. Sophisticated threat actors are catching on and Mandiant has observed an increased focus on long-term persistent access to Microsoft 365 as one of their primary objectives. The focus ...

The vulnerability of Microsoft Office packages, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server relates to insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of Microsoft Office packages, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server are related to insufficient protection of sensitive data. Exploiting these vulnerabilities can allow attackers to gain...

The provided client secret keys are expired.

Challenge Veeam Backup for Microsoft 365 displays one of the following errors: The provided client secret keys are expired. Copy Error: AADSTS7000222: The provided client secret keys are expired. Visit the Azure Portal to create new keys for your app, or consider using certificate credentials for...

PT-2021-2579 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to a memory corruption vulnerability in Microsoft Outlook, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is also...

Using Aviary to Analyze Post-Compromise Threat Activity in M365 Environments

Aviary is a new dashboard that CISA and partners developed to help visualize and analyze outputs from its Sparrow detection tool released in December 2020. Sparrow helps network defenders detect possible compromised accounts and applications in Azure/Microsoft O365 environments. CISA created...

BlueVoyant optimizes customer security with Microsoft security services

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. What a year it has been. The rapid and unexpected transition to work from home is one of the biggest issues affecting companies of all sizes and industries in 2020. As companies...

BlueVoyant optimizes customer security with Microsoft security services

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. What a year it has been. The rapid and unexpected transition to work from home is one of the biggest issues affecting companies of all sizes and industries in 2020. As companies...

Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

As seen in recent sophisticated cyberattacks, especially human-operated campaigns, it’s critical to not only detect an attack as early as possible but also to rapidly determine the scope of the compromise and predict how it will progress. How an attack proceeds depends on the attacker’s goals and...

Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

As seen in recent sophisticated cyberattacks, especially human-operated campaigns, it’s critical to not only detect an attack as early as possible but also to rapidly determine the scope of the compromise and predict how it will progress. How an attack proceeds depends on the attacker’s goals and...

Going Beyond Built-in Security: Email Threats in 2020

Explore the need for going beyond built-in Microsoft 365 and Google Workspace security based on email threats detected in 2020...

Veeam Backup for Microsoft 365 5b cumulative patch KB4135

This patch is superseded by Veeam Backup for Microsoft 365 5b cumulative patch KB4158 Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.1.179 or 5.0.1.207 prior to installing this cumulative patch KB4135. You can check this under Help and Support About in Veeam...

Mimecast: SolarWinds Attackers Stole Source Code

Hackers who compromised Mimecast networks as part of the SolarWinds espionage campaign have swiped some of the security firm’s source code repositories, according to an update by the company. The email security firm initially reported that a certificate compromise in January was part of the...

Vulnerability of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel – related to improper code generation – allows attackers to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel are related to improper code generation. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

The vulnerability of the Click-to-Run component of the Microsoft 365 Apps for Enterprise suite, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Click-to-Run component of the Microsoft 365 Apps for Enterprise suite is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...