Microsoft

Microsoft plugs online services account hijacking vulnerability

April 6, 2016

London-based security researcher and bug hunter Jack Whitton has discovered a serious cross-site request forgery flaw affecting Microsoft’s authentication system for …

How to block malicious macros for good?

March 23, 2016

Microsoft is finally doing something about the increasing threat of malicious macros: it has added a new feature in Office 2016 that will block macros from loading in certain …

Microsoft ends support for Windows 8, IE8 through 10: What does this mean for you?

January 13, 2016

Slowly but surely, Microsoft is pushing users towards Windows 10 and its new browser, Microsoft Edge. The way through this is by stop providing technical support and security …

Microsoft will stop trusting certificates from 20 Certificate Authorities

December 18, 2015

Starting on January 2016, Microsoft’s Trusted Root Certificate Program will no longer include twenty currently trusted CAs and will remove their root certificates …

Microsoft kills many critical flaws, some 0-days, un-trusts one wildcard cert

December 9, 2015

For this December Patch Tuesday, Microsoft has released twelve security bulletins, eight of which have been rated critical.Those refer to the cumulative security updates for …

Microsoft warns of imminent end of support for all but the latest Internet Explorer versions

December 7, 2015

Windows users who still prefer Internet Explorer to all other browsers have been urged by Microsoft to update to the latest (and last) version of the browser (v11), as the …

Windows machines stop trusting Dell’s two unconstrained root CA certs

December 1, 2015

Microsoft has updated the Certificate Trust list for all supported releases of Microsoft Windows so that the two digital certificates (complete with inadvertently disclosed …

New Dyre variant can target Windows 10 and Microsoft Edge users

November 20, 2015

As Microsoft continues to push Windows users towards adopting the latest version of the popular OS, malware authors have started adding support for it. Heimdal Security …

Microsoft’s new security posture leads to baked-in security

November 18, 2015

More than ever, Microsoft wants its products to be the first choice for enterprises, organizations, and governments. And to do that, they embedded security in the …

Microsoft wants researchers to find bugs in .NET Core and ASP.NET, will pay

October 23, 2015

Microsoft has launched another specialized bug bounty that’s set to run until January 20th, 2016.Bug hunters, who can earn between $500 and $15,000 depending on the …

Microsoft fixes critical flaws in all versions of Windows and Office

October 14, 2015

This month’s Microsoft Patch Tuesday brings fixes for 33 vulnerabilities. Nearly half of those are found in Internet Explorer, and most of them are critical as they …

Attackers take over org’s OWA server, harvest domain credentials with malicious DLL

October 6, 2015

Researchers from cyber attack detection and response outfit Cybereason have discovered a novel APT technique that was used by attackers to gain persistence in an (unnamed) …