Microsoft Skype DLL Hijacking

Hi @ll, since about two or three years now, Microsoft offers Skype as optional update on Windows/Microsoft Update. JFTR: for Microsoft's euphemistic use of "update" see Once installed, Skype uses its own proprietary update mechanism instead of Windows/Microsoft Update: Skype periodically runs...

Skype Finally Adds End-to-End Encryption for Private Conversations

Good news for Skype users who are concerned about their privacy. Microsoft is collaborating with popular encrypted communication company Signal to bring end-to-end encryption support to Skype messenger. End-to-end encryption assured its users that no one, not even the company or server that...

Google Detects Android Spyware That Spies On WhatsApp, Skype Calls

In an attempt to protect Android users from malware and shady apps, Google has been continuously working to detect and remove malicious apps from your devices using its newly launched Google Play Protect service. Google Play Protect—a security feature that uses machine learning and app usage...

The vulnerability of Skype for Business and Microsoft Lync messaging programs, related to deficiencies in access control, allows attackers to steal authentication hash codes.

The vulnerability of Skype for Business and Microsoft Lync instant messaging programs is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to steal the authentication hash code which can be reused, using a specially created user profile...

Skype Log Viewer - Download and View Skype History Without Skype

Download and View Skype History Without Skype. This program allows you to view all of your skype chat logs and then easily export them as text files. It correctly organizes them by conversation, and makes sure that group conversations do not get jumbled with one on one chats. Features Download...

Kiss Goodbye to Privacy: Microsoft Introduces Cortana for Skype

By Carolina Now you can enjoy the ultimate AI experience since Microsoft This is a post from HackRead.com Read the original post: Kiss Goodbye to Privacy: Microsoft Introduces Cortana for Skype...

CVE-2017-11786

Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability."...

CVE-2017-11786

Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability."...

Privilege escalation

Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability."...

CVE-2017-11786

CVE-2017-11786 affects Microsoft Lync 2013 SP1 and Skype for Business 2016. Root cause: improper handling of authentication requests, enabling an attacker to steal an authentication hash and reuse it elsewhere. Impact: privilege escalation and potential unauthorized actions by the attacker using ...

CVE-2017-11786

Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability."...

Microsoft Lync 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB4011179)

This host is missing an important security update according to Microsoft KB4011179 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

The vulnerability affects the Uniscribe services on the Windows operating system, the Microsoft Office software suite, the web conference software Live Meeting, the instant messaging application Skype for Business, and the instant messaging software Microsoft Lync. This vulnerability arises due to an out-of-buffer operation in memory, allowing an attacker to execute arbitrary code.

The vulnerability affects the Uniscribe services on the Windows operating system, the Microsoft Office software suite, the web conference software Live Meeting, the instant messaging application Skype for Business, and the instant messaging software Microsoft Lync. It stems from an operation that...

Microsoft Skype for Business Elevation of Privilege Vulnerability

Microsoft Lync 2013 SP1 and Skype for Business 2016 are both products of Microsoft Corporation.Microsoft Lync formerly known as Microsoft Office Communicator 2013 SP1 is a new generation of integrated communication platform for the enterprise. Skype for Business 2016 is a set of integrated...

Microsoft Issues Patches For Severe Flaws, Including Office Zero-Day & DNS Attack

As part of its "October Patch Tuesday," Microsoft has today released a large batch of security updates to patch a total of 62 vulnerabilities in its products, including a severe MS office zero-day flaw that has been exploited in the wild. Security updates also include patches for Microsoft Window...

Security Update for Skype for Business 2016 (KB4011159) 32-Bit Edition

A security vulnerability exists in Skype for Business 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Skype for Business 2015 (KB4011179) 64-Bit Edition

A security vulnerability exists in Skype for Business 2015 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Skype for Business 2016 (KB4011159) 64-Bit Edition

A security vulnerability exists in Skype for Business 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Skype for Business 2015 (KB4011179) 32-Bit Edition

A security vulnerability exists in Skype for Business 2015 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Skype for Business Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Skype for Business fails to properly handle specific authentication requests. An authenticated attacker who successfully exploited this vulnerability could steal an authentication hash that can be reused elsewhere. The attacker could then take a...