CVE-2023-24955 has joined CISA's Known Exploited Vulnerabilities catalog, signaling both the severity & increased risk of widespread attacks
Microsoft
A security researcher has published details and proof-of-concept (PoC) code for a Windows CVE-2023-36424 vulnerability
Using info mined from the stolen data, Midnight Blizzard gained access to Microsoft's internal systems, including sensitive source code
Midnight Blizzard employed a password spray attack to breach a legacy non-production test tenant account within Microsoft's corporate systems
Microsoft has warned that successful exploitation of the CVE-2023-36041 vulnerability could grant the attacker high privileges
a cornerstone of Microsoft's cybersecurity strategy, awarding over $60 million to security researchers across 70 countries
Trusted locations" was Microsoft's countermeasure to prevent Visual Studio projects from being used maliciously to achieve RCE
Google and Microsoft confirmed that two zero-day vulnerabilities, CVE-2023-4863 and CVE-2023-5217 have been maliciously exploited in the wild
CVE-2023-36802 allows hackers to gain the coveted SYSTEM privileges, granting them unfettered access to a machine's core functionalities
Anonymous Sudan breached Microsoft and could access a large database containing 30 million Microsoft accounts and related information
Recently, a hacker group self-proclaiming as Anonymous Sudan has instigated DDoS attacks against several Microsoft services
Microsoft has announced that it will henceforth employ climate-related nomenclature to designate various types of hacking activities
Microsoft engineers could also leak sensitive credentials. The sensitive credentials are Microsoft's own credentials used on Microsoft Azure
the South American hacker group LAPSUS$ announced that it had penetrated Microsoft's internal development environment