Microsoft Warns of Widespread Phishing Attacks Using Open Redirects
By: Ravie Lakshmanan
Microsoft is warning of a widespread credential phishing campaign that leverages open redirector links in email communications as a vector to trick users into visiting malicious websites...
One Year Later, a Look Back at Zerologon
Microsoft's Patch Tuesday for August 2020 addressed 120 vulnerabilities, including two zero-days and one elevation-of-privilege flaw in the Netlogon remote protocol that initially flew under the radar for many.
Over...
Critical Cosmos Database Flaw Affected Thousands of Microsoft Azure Customers
By: Ravie Lakshmanan
Cloud infrastructure security company Wiz on Thursday revealed details of a now-fixed Azure Cosmos database vulnerability that could have been potentially exploited to grant any Azure user...
‘Pay Ransom’ Screen? Too Late, Humpty Dumpty – Podcast
Splunk’s Ryan Kovar discusses the rise in supply-chain attacks a la Kaseya & how to get ahead of encryption leaving your business a pile of broken shells.
Systems actively encrypted?...
Ragnarok Ransomware Gang Bites the Dust, Releases Decryptor
The cybercriminal group, active since late 2019, has closed its doors and released the key to unlocking victims’ files on its dark web portal.
Another cybercriminal gang notorious for ransomware...
Critical Azure Cosmos DB Bug Allows Full Cloud Account Takeover
It’s unclear if Microsoft customers were breached during the months-long period where the #ChaosDB bug in Jupyter Notebooks was exploitable.
A critical security vulnerability in Microsoft’s Azure cloud database platform...
