MFA Bypass Bugs Opened Microsoft 365 to Attack

Bugs in the multi-factor authentication system used by Microsoft’s cloud-based office productivity platform, Microsoft 365, opened the door for hackers to access cloud applications via a bypass of the security system, according to researchers at Proofpoint. The flaws exist in the implementation o...

The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office and Microsoft 365 applications, allows attackers to gain control over programs, access data for viewing, modification, or deletion, and create new accounts with full user rights.

The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office and Microsoft 365 applications, stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileges to install...

3 ways Microsoft 365 can help you reduce helpdesk costs

With more people than ever working remotely, organizations must maximize employee productivity while protecting an ever-growing digital footprint. Many have stitched together specialized security solutions from different vendors to improve their cybersecurity posture, but this approach is expensi...

Enterprise Threat Protector Now Includes One-Click Performance Optimization for Microsoft 365

Microsoft 365 is becoming the essential productivity suite for enterprises. Over 1 million companies have now signed up for the service, and every month there are more than 200 million active users. Microsoft Teams alone has 75 million active users every day. If your company already uses or is...

The vulnerability of the Microsoft 365 Apps for Enterprise package lies in the use of an insecure search path, allowing a hacker to execute arbitrary code.

The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client relates to object processing errors in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Preventing data loss and mitigating risk in today’s remote work environment

The shift to remote work over the past few months has increased the need for organizations to re-evaluate their security and risk management practices. With employees accessing corporate data at times on home computers or sharing and collaborating in new ways, organizations could be at greater ri...

Veeam Backup for Microsoft 365 4c cumulative patch KB3222

This patch has been superseded by Veeam Backup for Microsoft 365 4c cumulative patch KB4083. Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 4.0.1.531 prior to installing this cumulative patch KB3222. You can check this under Help About in Veeam Backup for Microso...

"Proxy offline time exceeded” error after updating Veeam Backup for Microsoft 365 to version 4c

Challenge After updating Veeam Backup for Microsoft 365 4c build 4.0.1.531 backups start to fail with the "Proxy offline time exceeded". Cause At the end of every month, Veeam Backup for Microsoft 365 collects licensing information. If your Veeam Backup for Microsoft 365 server is installed on a...

Deploying Veeam Backup for Microsoft 365 Backup Proxy Server in AWS

Challenge You need to configure an Amazon EC2 instance to act as a Backup Proxy for Veeam Backup for Microsoft 365 in AWS. For example, this may be required for the following reasons: The current proxy/deployment has or will reach configuration maximums. Growth within the Organizations. You need ...

Veeam Backup for Microsoft 365 4c cumulative patch KB3194

IMPORTANT This patch is intended only for Veeam Backup for Microsoft 365 version 4c build 4.0.1.519. Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 4.0.1.519 prior to installing this cumulative patch KB3194. You can check this under Help About in Veeam Backup for...

Release information for Veeam Backup for Microsoft 365 4c

NOTE A cumulative patch is now available, click here for more information Veeam Backup for Microsoft 365 4c cumulative patch KB4099. IMPORTANT The GA build of Veeam Backup for Microsoft 365 version 4c build 4.0.1.519 was recalled due to a backup sync issue identified by Veeam quality assurance. I...

Data governance matters now more than ever

Knowing, protecting, and governing your organizational data is critical to adhere to regulations and meet security and privacy needs. Arguably, that’s never been truer than it is today as we face these unprecedented health and economic circumstances. To help organizations to navigate privacy duri...

Veeam Backup for Microsoft 365 4b cumulative patch KB3119

Challenge Veeam Backup for Microsoft 365 4b cumulative patch KB3119. Please note that Veeam Backup for Microsoft 365 4с is now available and contains all the resolved issues from Veeam Backup for Microsoft 365 4b. Cause Please confirm you are running Veeam Backup for Microsoft 365 4b build...

Veeam Backup for Microsoft 365 4a cumulative patch KB3089

Challenge Veeam Backup for Microsoft 365 4a cumulative patch KB3089. Cause Please confirm you are running Veeam Backup for Microsoft 365 4a build 4.0.0.1553 prior to installing this cumulative patch KB3089. You can check this under Help About in Veeam Backup for Microsoft 365 console. After...

Microsoft Insider Risk Management and Communication Compliance in Microsoft 365 now generally available

Microsoft Insider Risk Management and Communication Compliance in Microsoft 365—now generally available—help organizations address internal risks, such as IP theft or code of conduct policy violations. The new Microsoft Insider Risk Management solution helps to quickly identify, detect, and act o...

Microsoft Threat Protection stops attack sprawl and auto-heals enterprise assets with built-in intelligence and automation

Attackers will cross multiple domains like email, identity, endpoints, and applications to find the point of least resistance. Today’s defense solutions have been designed to protect, detect, and block threats for each domain separately, allowing attackers to exploit the seams and threshold...

Mattress Firm deployed Azure Active Directory to securely connect Firstline Workers to their SaaS apps and to each other

Today, we have another interesting story for the Voice of the Customer blog series. Tony Miller and Jon Sider of Mattress Firm deployed Azure Active Directory Azure AD to create a secure authentication experience for employees, including their Firstline Workforce. Much like sleep and a good...

Building on secure productivity

Among the most common and powerful attack vectors we have seen are those that exploit the daily tradeoff users make between security and productivity. Often, this can be as simple as a document hiding an exploit or a malicious link. As an industry, we’re used to thinking of security and...

Veeam Backup for Microsoft 365 Support for Microsoft Office 365 Multi-Geo Tenant

Purpose This article documents Limitations and Considerations when using Veeam Backup for Microsoft 365 to protect Microsoft 365 with the Multi-Geo feature enabled. Solution Veeam Backup for Microsoft 365 6.0 and newer The Multi-Geo feature is fully supported but has the following limitations:...