Release Information for Veeam Backup for Microsoft 365 5a

This update has been superseded by Release Information for Veeam Backup for Microsoft 365 5b. Requirements Please confirm that you are running one of the following versions of Veeam Backup for Microsoft 365 before upgrading to 5a: 3.0 build 3.0.0.422 4.0 build 4.0.0.1345 4a builds 4.0.0.1553,...

Veeam Backup for Microsoft 365 4c cumulative patch KB4083

This patch has been superseded by Veeam Backup for Microsoft 365 4c cumulative patch KB4099. Requirements Please confirm you are running Veeam Backup for Microsoft 365 builds 4.0.1.531 or 4.0.1.545 prior to installing this cumulative patch KB4083. You can check this under Help and Support About i...

PT-2020-5238 · Microsoft · Office Web Apps +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft 365 Apps for...

Microsoft Office PowerPoint Security Vulnerability

Microsoft Office PowerPoint is a software used to create, presentations PPT by Microsoft Corporation USA. A security vulnerability exists in Microsoft Office PowerPoint. The following products and editions are affected:Microsoft PowerPoint 2016 64-bit edition,Microsoft PowerPoint 2010 Service Pac...

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Outlook. The following products and editions are affected:Microsoft Outlook 2013 RT Service Pack 1,Microsoft Outlook 2010 Service Pack 2 64-bit...

Veeam Backup for Microsoft 365 5.0 cumulative patch KB4078

Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.0.1061 or 5.0.0.1063 prior to installing this cumulative patch KB4078. You can check this by clicking Help and Support About in the main menu of the Veeam Backup for Microsoft 365 console. After upgrading, your...

Release Information for Veeam Backup for Microsoft 365 5.0

Requirements Please confirm that you are running one of the following versions of Veeam Backup for Microsoft 365 before upgrading to 5.0: 3.0 build 3.0.0.422 4.0 build 4.0.0.1345 4a builds 4.0.0.1553, 4.0.0.1580 4b builds 4.0.0.2516, 4.0.0.2549 4c builds 4.0.1.519, 4.0.1.531, 4.0.1.545 You can...

Zerologon is now detected by Microsoft Defender for Identity

There has been a huge focus on the recently patched CVE-2020-1472 Netlogon Elevation of Privilege vulnerability, widely known as ZeroLogon. While Microsoft strongly recommends that you deploy the latest security updates to your servers and devices, we also want to provide you with the best...

Zerologon is now detected by Microsoft Defender for Identity

There has been a huge focus on the recently patched CVE-2020-1472 Netlogon Elevation of Privilege vulnerability, widely known as ZeroLogon. While Microsoft strongly recommends that you deploy the latest security updates to your servers and devices, we also want to provide you with the best...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, and Microsoft 365 Apps for Enterprise, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Microsoft 365 Apps for Enterprise, is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, and Microsoft 365 Apps for Enterprise, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Microsoft 365 Apps for Enterprise, is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Extend data loss prevention to your devices with Microsoft Endpoint Data Loss Prevention, now generally available

Microsoft Endpoint Data Loss Prevention Endpoint Data Loss Prevention DLP | What it is and how to set it up in Microsoft 365. Watch today Managing and protecting data is critical to any organization. Data is growing exponentially, and remote work is making it even harder to manage risks around...

Extend data loss prevention to your devices with Microsoft Endpoint Data Loss Prevention, now generally available

Microsoft Endpoint Data Loss Prevention Endpoint Data Loss Prevention DLP | What it is and how to set it up in Microsoft 365. Watch today Managing and protecting data is critical to any organization. Data is growing exponentially, and remote work is making it even harder to manage risks around...

PT-2020-4759 · Microsoft · Office +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the improper handling of objects in memory...

PT-2020-4760 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the improper handling of objects in memory...

How to Create a Secure IAM Policy for Connection to S3 Object Storage

Purpose This article documents how to create a secure IAM policy to connect to the S3 bucket used as an object storage repository in Veeam Backup for Microsoft 365 for storing backup data. Solution The following permissions will allow Veeam Backup for Microsoft 365 to access the S3 bucket to save...

Majority of Microsoft 365 Admins Don't Enable MFA

Up to 78 percent of Microsoft 365 administrators do not have multi-factor authentication MFA security measures enabled. A recent report by CoreView Research also found that 97 percent of all total Microsoft 365 users do not use MFA, shedding a grim light on the security issues inherent with the...

Office 365: A Favorite for Cyberattack Persistence

Threat actors are consistently leveraging legitimate services and tools from within Microsoft Office 365 to pilfer sensitive data and launch phishing, ransomware, and other attacks across corporate networks from a persistent position inside the cloud-based suite, new research has found. Office 36...

Trickbot disrupted

As announced today, Microsoft took action against the Trickbot botnet, disrupting one of the world’s most persistent malware operations. Microsoft worked with telecommunications providers around the world to disrupt key Trickbot infrastructure. As a result, operators will no longer be able to use...

Detecting Microsoft 365 and Azure Active Directory Backdoors

Mandiant has seen an uptick in incidents involving Microsoft 365 M365 and Azure Active Directory Azure AD. Most of these incidents are the result of a phishing email coercing a user to enter their credentials used for accessing M365 into a phishing site. Other incidents have been a result of...