A security researcher has published details and proof-of-concept (PoC) code for a Windows CVE-2023-36424 vulnerability that could be exploited to elevate privileges from a Medium Integrity Level to a High...
Microsoft has confirmed a new, significant intrusion by the persistent Russia-based hacking group Midnight Blizzard (NOBELIUM). The threat actors leveraged information exfiltrated during a January cyberattack to gain recent, unauthorized...
In an unprecedented turn of events, Microsoft’s security team has recently unearthed an insidious cyber attack, carried out by the notorious Russian state-sponsored actor known as Midnight Blizzard, or Nobelium....
Recently, Cisco’s Talos intelligence group shed light on a critical vulnerability in Microsoft Excel, a ubiquitous tool in data management and analysis. The vulnerability tracked as CVE-2023-36041 and carrying a...
This year marks a significant milestone for Microsoft – the tenth anniversary of its Bug Bounty Program. Launched in 2013, this initiative has become a cornerstone of Microsoft’s cybersecurity strategy,...
The security of development tools is paramount. As software becomes more integrated with our daily lives, the importance of maintaining the security and integrity of the tools that craft it...
In the rapidly evolving landscape of cyber threats, zero-day vulnerabilities serve as hidden trapdoors, allowing cybercriminals a secret entrance. Microsoft, the tech behemoth, has recently turned the spotlight on two...
As September rolls in, the tech community knows to brace themselves for Microsoft’s monthly security disclosures, a ritual known as Patch Tuesday. This month, the giant fixed 65 flaws, with...
Some time ago, an anonymous group from Sudan initiated DDoS attacks on various Microsoft online services, precipitating intermittent interruptions across multiple Microsoft 365 services. While there exists no feud between...
Recently, a hacker group self-proclaiming as Anonymous Sudan has instigated DDoS attacks against several Microsoft services, encompassing Outlook, OneDrive, and Microsoft Azure, among others. Typically enduring between one to two...
Microsoft has announced that it will henceforth employ climate-related nomenclature to designate various types of hacking activities. Unclassified hacking behavior still under investigation will be dubbed “Storm,” while hacking activities...
Exposing information such as private keys or passwords on Github is not new. In the past few years, hackers have often completed attacks by retrieving specific keywords on Github to...
Yesterday, the South American hacker group LAPSUS$ announced that it had penetrated Microsoft’s internal development environment and stole the source code of some product lines. The affected product lines are...
Just recently, Microsoft announced that it had acquired a code-hosting platform GitHub for US$7.5 billion. The acquisition agreement has been reached. According to the process, the acquisition is expected to be completed by...
Last weekend, Microsoft was in talks to negotiate the news of a wholly-owned acquisition of GitHub. Bloomberg News released the latest report in the early morning of June 4th, according to sources familiar with the matter, Microsoft...
Support Securityonline.info site. Thanks!
