Earlier reports mentioning Microsoft
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday, October 24, 2023, the addition of four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities are confirmed to be actively exploited in the wild, posing…
Microsoft Defender Experts have identified and linked more than 30 distinct web domains to the infrastructure of MacSync Stealer, a malware specifically designed to steal information from macOS devices. This attribution was achieved by correlating recurring endpoint and network behaviors…
Varonis Threat Labs has disclosed three critical vulnerabilities within Microsoft Copilot Personal, collectively named CoSnitch, which could permit unauthorized data exfiltration with a single click. These flaws leverage an undocumented URL parameter that Microsoft Copilot Personal itself surfaced, enabling attackers…
Cybersecurity researchers have detailed a previously undocumented Python implant framework, codenamed TWINLOOT, which has been engineered to operate its entire command-and-control (C2) infrastructure within trusted Microsoft cloud services, specifically SharePoint Online and Microsoft Teams.
This week's cybersecurity landscape was marked by a series of significant threats, including the exploitation of VMware vulnerabilities, the emergence of a Windows zero-day flaw, and sophisticated browser session hijacking techniques.