Experimental News Clipping Site

Tag: Microsoft Security

  • Microsoft Security Blog: Code injection attacks using publicly disclosed ASP.NET machine keys

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/06/code-injection-attacks-using-publicly-disclosed-asp-net-machine-keys/ Source: Microsoft Security Blog Title: Code injection attacks using publicly disclosed ASP.NET machine keys Feedly Summary: Microsoft Threat Intelligence observed limited activity by an unattributed threat actor using a publicly available, static ASP.NET machine key to inject malicious code and deliver the Godzilla post-exploitation framework. In the course of investigating, remediating, and…

  • Microsoft Security Blog: Fast-track generative AI security with Microsoft Purview

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/27/fast-track-generative-ai-security-with-microsoft-purview/ Source: Microsoft Security Blog Title: Fast-track generative AI security with Microsoft Purview Feedly Summary: Read how Microsoft Purview can secure and govern generative AI quickly, with minimal user impact, deployment resources, and change management. The post Fast-track generative AI security with Microsoft Purview appeared first on Microsoft Security Blog. AI Summary and…

  • Microsoft Security Blog: Hear from Microsoft Security experts at these top cybersecurity events in 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/03/hear-from-microsoft-security-experts-at-these-top-cybersecurity-events-in-2025/ Source: Microsoft Security Blog Title: Hear from Microsoft Security experts at these top cybersecurity events in 2025 Feedly Summary: Security events offer a valuable opportunity to learn about the latest trends and solutions, evolve your skills for cyberthreats, and meet like-minded security professionals. See where you can meet Microsoft Security in 2025.…

  • Microsoft Security Blog: 3 priorities for adopting proactive identity and access security in 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/28/3-priorities-for-adopting-proactive-identity-and-access-security-in-2025/ Source: Microsoft Security Blog Title: 3 priorities for adopting proactive identity and access security in 2025 Feedly Summary: Adopting proactive defensive measures is the only way to get ahead of determined efforts to compromise identities and gain access to your environment. The post 3 priorities for adopting proactive identity and access security…

  • Hacker News: Microsoft Probing If DeepSeek-Linked Group Improperly Obtained OpenAI Data

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.bloomberg.com/news/articles/2025-01-29/microsoft-probing-if-deepseek-linked-group-improperly-obtained-openai-data Source: Hacker News Title: Microsoft Probing If DeepSeek-Linked Group Improperly Obtained OpenAI Data Feedly Summary: Comments AI Summary and Description: Yes Summary: Microsoft and OpenAI are reportedly investigating a potential data exfiltration incident involving their technology linked to a Chinese AI startup, DeepSeek. This raises critical concerns about security and integrity in…

  • Hacker News: Shifting Cyber Norms: Microsoft security POST-ing to you

    —

    by

    Kurt Seifried
    in

    Source URL: https://berthub.eu/articles/posts/shifting-cyber-norms-microsoft-post/ Source: Hacker News Title: Shifting Cyber Norms: Microsoft security POST-ing to you Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the increasing intrusion of email security scanners, particularly by Microsoft, which now not only performs GET requests but also executes JavaScript and sends POST requests on behalf of…

  • Microsoft Security Blog: New Star Blizzard spear-phishing campaign targets WhatsApp accounts

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/16/new-star-blizzard-spear-phishing-campaign-targets-whatsapp-accounts/ Source: Microsoft Security Blog Title: New Star Blizzard spear-phishing campaign targets WhatsApp accounts Feedly Summary: In mid-November 2024, Microsoft Threat Intelligence observed the Russian threat actor we track as Star Blizzard sending their typical targets spear-phishing messages, this time offering the supposed opportunity to join a WhatsApp group. This is the first…

  • Microsoft Security Blog: Innovating in line with the European Union’s AI Act 

    —

    by

    Kurt Seifried
    in

    Source URL: https://blogs.microsoft.com/on-the-issues/?p=66749 Source: Microsoft Security Blog Title: Innovating in line with the European Union’s AI Act  Feedly Summary: As our Microsoft AI Tour reached Brussels, Paris, and Berlin recently, we met with European organizations that were energized by the possibilities of our latest AI technologies and engaged in deployment projects. They were also alert…

  • Alerts: Microsoft Releases January 2025 Security Updates

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/microsoft-releases-january-2025-security-updates Source: Alerts Title: Microsoft Releases January 2025 Security Updates Feedly Summary: Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  CISA encourages users and administrators to review the following and apply necessary updates:…

  • Microsoft Security Blog: 3 takeaways from red teaming 100 generative AI products

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/13/3-takeaways-from-red-teaming-100-generative-ai-products/ Source: Microsoft Security Blog Title: 3 takeaways from red teaming 100 generative AI products Feedly Summary: Since 2018, Microsoft’s AI Red Team has probed generative AI products for critical safety and security vulnerabilities. Read our latest blog for three lessons we’ve learned along the way. The post 3 takeaways from red teaming…