Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Microsoft Warns
LinkedIn Phishing Scam Uses Fake Alerts to Hack Accounts
A LinkedIn phishing scam uses fake notifications and lookalike domains to steal credentials, hijack accounts, and access sensitive professional data.’ A new phishing campaign is targeting professionals by exploiting fake LinkedIn notifications to hijack user accounts and steal sensitive data.
Wikipedia’s AI agent row likely just the beginning of the bot-ocalypse
Table of Contents What’s next? The Internet is filled with people who insist on being right. In the past, at least they could be reasonably sure that they were arguing with other humans. Those days are gone, apparently. Wikipedia just had to ban an AI that was making edits on its own. Apparently, the AI took it personally. The AI, named Tom-Assistant, was writing articles on Wikipedia.
AI-driven identity must exist in a robust compliance framework
As enterprises rush to integrate artificial intelligence‑driven identity and verification solutions, it is tempting to be swept up in their operational elegance and apparent efficiency. But as I have argued repeatedly, deploying AI without governance‑first thinking is a strategic mistake, and one that risks compliance failures, ethical missteps, and reputational harm.
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass Original
Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script (VBS) files. The activity, beginning in late February 2026, leverages these scripts to initiate a multi-stage infection chain for establishing persistence and enabling remote access. It's currently not known what lures the threat actors use to trick users into executing the scripts.
Microsoft Warns Of Tax-Themed Email Attacks Using PDFs And QR Codes To Deliver Malware
Microsoft is warning of several phishing campaigns that are leveraging tax-related themes to deploy malware and steal credentials. "These campaigns notably use redirection methods such as URL shorteners and QR codes contained in malicious attachments and abuse legitimate services like file-hosting services and business profile pages to avoid detection," Microsoft said in a report shared with The Hacker News.
Microsoft Warns Of Malvertising Campaign Infecting Over 1 Million Devices Worldwide
Microsoft has disclosed details of a large-scale malvertising campaign that's estimated to have impacted over one million devices globally as part of what it said is an opportunistic attack designed to steal sensitive information.
Microsoft Warns Of ClickFix Phishing Campaign Targeting Hospitality Sector Via Fake Booking[.]com Emails
Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking.com using an increasingly popular social engineering technique called ClickFix to deliver credential-stealing malware. The activity, the tech giant said, started in December 2024 and operates with the end goal of conducting financial fraud and theft. It's tracking the campaign under the moniker Storm-1865.
Microsoft Warns Of Chinese Botnet Exploiting Router Flaws For Credential Theft
Microsoft has revealed that a Chinese threat actor it tracks as Storm-0940 is leveraging a botnet called Quad7 to orchestrate highly evasive password spray attacks. The tech giant has given the botnet the name CovertNetwork-1658, stating the password spray operations are used to steal credentials from multiple Microsoft customers.
Microsoft unveiled Office 2024
Microsoft has released an updated Office 2024 suite of tools for consumers who don’t want to pay a monthly subscription to Microsoft 365. The suite includes updated Word, Excel, PowerPoint, OneNote, and Outlook. The last version of a separate set of programs for work from Microsoft was released in 2021. Therefore, Office 2024 has received many updates and improvements compared to the previous version. First of all, all the programs in the suite have received Windows-style Fluent Design.
Microsoft Warns Of Unpatched Office Vulnerability Leading To Data Breaches
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to malicious actors.
Microsoft Warns Of Widening APT29 Espionage Attacks Targeting Global Orgs
Microsoft on Thursday said the Russian state-sponsored threat actors responsible for a cyber attack on its systems in late November 2023 have been targeting other organizations and that it's currently beginning to notify them.
Google Chrome Boosts Security with New Safety Check Feature
Google just spiced things up for Chrome users on desktop with some cool new features, and one of them is a game-changer in the security department. Meet Safety Check – your virtual guardian angel. This handy feature keeps an eye out for any shady business with your passwords, giving you a heads-up if they’ve been compromised. It’s also got your back on malware, sniffing out any dubious extensions you might have unknowingly installed.
Microsoft Warns Of New 'FalseFont' Backdoor Targeting The Defense Sector
Organizations in the Defense Industrial Base (DIB) sector are in the crosshairs of an Iranian threat actor as part of a campaign designed to deliver a never-before-seen backdoor called FalseFont. The findings come from Microsoft, which is tracking the activity under its weather-themed moniker Peach Sandstorm (formerly Holmium), which is also known as APT33, Elfin, and Refined Kitten.
Microsoft Warns Of Storm-0539: The Rising Threat Behind Holiday Gift Card Frauds
Microsoft is warning of an uptick in malicious activity from an emerging threat cluster it's tracking as Storm-0539 for orchestrating gift card fraud and theft via highly sophisticated email and SMS phishing attacks against retail entities during the holiday shopping season. The goal of the attacks is to propagate booby-trapped links that direct victims to adversary-in-the-middle (AiTM) phishing pages that are capable of harvesting their credentials and session tokens.
Microsoft Warns Of Hackers Exploiting OAuth For Cryptocurrency Mining And Phishing
Microsoft has warned that adversaries are using OAuth applications as an automation tool to deploy virtual machines (VMs) for cryptocurrency mining and launch phishing attacks. "Threat actors compromise user accounts to create, modify, and grant high privileges to OAuth applications that they can misuse to hide malicious activity," the Microsoft Threat Intelligence team said in an analysis.
Microsoft Warns Of COLDRIVER's Evolving Evading And Credential-Stealing Tactics
The threat actor known as COLDRIVER has continued to engage in credential theft activities against entities that are of strategic interests to Russia while simultaneously improving its detection evasion capabilities. The Microsoft Threat Intelligence team is tracking under the cluster as Star Blizzard (formerly SEABORGIUM). It's also called Blue Callisto, BlueCharlie (or TAG-53), Calisto (alternately spelled Callisto), and TA446.
Microsoft Warns Of Malvertising Scheme Spreading CACTUS Ransomware
Microsoft has warned of a new wave of CACTUS ransomware attacks that leverage malvertising lures to deploy DanaBot as an initial access vector. The DanaBot infections led to "hands-on-keyboard activity by ransomware operator Storm-0216 (Twisted Spider, UNC2198), culminating in the deployment of CACTUS ransomware," the Microsoft Threat Intelligence team said in a series of posts on X (formerly Twitter).
Microsoft Warns Of Fake Skills Assessment Portals Targeting IT Job Seekers
A sub-cluster within the infamous Lazarus Group has established new infrastructure that impersonates skills assessment portals as part of its social engineering campaigns. Microsoft attributed the activity to a threat actor it calls Sapphire Sleet, describing it as a "shift in the persistent actor's tactics." Sapphire Sleet, also called APT38, BlueNoroff, CageyChameleon, and CryptoCore, has a track record of orchestrating cryptocurrency theft via social engineering.
Microsoft Warns Of North Korean Attacks Exploiting TeamCity Flaw
North Korean threat actors are actively exploiting a critical security flaw in JetBrains TeamCity to opportunistically breach vulnerable servers, according to Microsoft. The attacks, which entail the exploitation of CVE-2023-42793 (CVSS score: 9.8), have been attributed to Diamond Sleet (aka Labyrinth Chollima) and Onyx Sleet (aka Andariel or Silent Chollima). It's worth noting that both the threat activity clusters are part of the infamous North Korean nation-state actor known as Lazarus Group.
Microsoft Warns Of Cyber Attacks Attempting To Breach Cloud Via SQL Server Instance
Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environment through a SQL Server instance. "The attackers initially exploited a SQL injection vulnerability in an application within the target's environment," security researchers Sunders Bruskin, Hagai Ran Kestenberg, and Fady Nasereldeen said in a Tuesday report.
Microsoft Warns Of Nation-State Hackers Exploiting Critical Atlassian Confluence Vulnerability
Microsoft has linked the exploitation of a recently disclosed critical flaw in Atlassian Confluence Data Center and Server to a nation-state actor it tracks as Storm-0062 (aka DarkShadow or Oro0lxy). The tech giant's threat intelligence team said it observed in-the-wild abuse of the vulnerability since September 14, 2023. "CVE-2023-22515 is a critical privilege escalation vulnerability in Atlassian Confluence Data Center and Server," the company noted in a series of posts on X (formerly Twitter).
Microsoft Warns Of New Phishing Campaign Targeting Corporations Via Teams Messages
Microsoft is warning of a new phishing campaign undertaken by an initial access broker that involves using Teams messages as lures to infiltrate corporate networks. The tech giant's Threat Intelligence team is tracking the cluster under the name Storm-0324, which is also known by the monikers TA543 and Sagrid.
5 big earnings hits: Meta delights, Microsoft warns in huge week for tech, AI
Investing.com -- Here is your Pro Recap of the biggest earnings reports you may have missed this week and what Wall Street analysts have to say: Numbers out of Meta, Alphabet, Microsoft, Boeing, and McDonald's. InvestingPro subscribers got this news in rapid fire. Never be left in the dust again.
5 big earnings hits: Meta delights, Microsoft warns in huge week for tech, AI
Investing.com -- Here is your Pro Recap of the biggest earnings reports you may have missed this week and what Wall Street analysts have to say: Numbers out of Meta, Alphabet, Microsoft, Boeing, and McDonald's. InvestingPro subscribers got this news in rapid fire. Never be left in the dust again.
Microsoft Warns Of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability
Microsoft on Monday said it detected Kremlin-backed nation-state activity exploiting a critical security flaw in its Outlook email service to gain unauthorized access to victims' accounts within Exchange servers. The tech giant attributed the intrusions to a threat actor it called Forest Blizzard (formerly Strontium), which is also widely tracked under the monikers APT28, BlueDelta, Fancy Bear, FROZENLAKE, Iron Twilight, Sednit, and Sofacy.
Midday movers: First Republic, Meta Platforms, Novo Nordisk and more
By Liz Moyer Investing.com — Stocks rallied on Tuesday after inflation data stoked hopes the Federal Reserve would be less aggressive with interest rates when it meets next week and bank stocks led the indexes higher. Here are the midday movers for March 14. First Republic Bank (NYSE:) shares rebounded after a sharp sell-off on Monday. They were up 41% at midday. Shares of PacWest Bancorp (NASDAQ:) were up 51%, while KeyCorp (NYSE:) shares were up more than 11% and Comerica Inc (NYSE:) rose 5.9%.
The Budget looks set to ease pension tension for high earners
The highest earners in Britain could have NHS doctors to thank for boosting their financial health in retirement. An expected relaxation of pensions tax limits in Wednesday’s Budget aims to cure the malady of medics reducing their hours or taking early retirement to avoid tax bills arising from breaching pensions limits. However, the chancellor’s medicine will also put a spring in the step of the wealthiest workers, no matter how they earn their living.
SDI Presence Appoints Former CIO and Amazon/Cisco Executive ... - PR Newswire
Co-Founder David Gupta Assumes Executive Chairman Role, Focus on Long-Term Customer Engagement , /PRNewswire/ — SDI Presence LLC (SDI), the National Minority Supplier Development Council (NMSDC) Corporate Plus-certified IT consultancy and managed services provider (MSP), announced that Hardik Bhatt has been appointed Chief Executive Officer. Formerly the firm’s President and Chief Growth Officer, Bhatt succeeds the firm’s co-founder David A.
Microsoft Warns of Increasing Use of MFA Bypass Tools in Phishing ... - TechDecisions
A malicious link shared in a phishing message for an AiTM campaign. Courtesy/Microsoft Microsoft is warning organizations of an uptick in Adversary-in-the-Middle (AiTM) phishing kits that are capable of bypassing multi-factor authentication (MFA) through reverse-proxy functionality, rendering the security tool that many organizations now deploy useless.
What is National Insurance and what’s the current threshold?
MILLIONS of workers need to pay tax towards state benefits, known as National Insurance. It goes into a pot that pays for benefits like sick pay and the state pension. But how does it work, and when do you need to pay? We explain all you need to know. What is National Insurance? National Insurance is a tax on your earnings, and goes towards state benefits including the state pension, statutory sick pay, maternity leave and unemployment benefits.
Should you be worried about your money, your bank or the U.S. banking system? Experts weigh in
Despite the 2008 financial crisis, bank failures are considered extremely rare. However, the unexpected shutdowns of Silicon Valley Bank and Signature Bank have many consumers concerned about their deposits, their bank and the U.S. banking system. “Every American should feel confident their deposits will be there if and when they need them,” President Joe Biden said Monday in an address aimed at easing fears as the U.S. Federal Reserve, the Federal Deposit Insurance Corp.
Snitching to an empty home hotline won’t help the housing crisis
It’s time to report your neighbour, says Westminster Council, which oversees some of the wealthiest areas in London including Knightsbridge, Belgravia and Mayfair. Not for noise, bad behaviour or planning infringement. For being antisocial — in the sense of not being part of society. The council is planning to set up an empty homes hotline. Any property left empty for more than six months is worthy of being reported.
Shlomo Kramer joins Rescana's Advisory Board | Ctech - CTech
Cybersecurity company Rescana, which has developed an attack surface and third-party risk management platform, has announced that Shlomo Kramer has joined its advisory board. Kramer, who has been called “the godfather of Israeli cybersecurity”, is currently serving as the CEO of Cato Networks and has held board member, investor, and chairman positions in public and private cybersecurity firms like Imperva, Palo Alto Networks, and Check Point.
Microsoft Warns Of Large-Scale Use Of Phishing Kits To Send Millions Of Emails Daily
An open source adversary-in-the-middle (AiTM) phishing kit has found a number of takers in the cybercrime world for its ability to orchestrate attacks at scale. Microsoft Threat Intelligence is tracking the threat actor behind the development of the kit under its emerging moniker DEV-1101. An AiTM phishing attack typically involves a threat actor attempting to steal and intercept a target's password and session cookies by deploying a proxy server between the user and the website.
BlackLotus is the first bootkit bypassing UEFI Secure Boot on Windows 11
2023-03-01 22:03 ESET discovered a stealthy Unified Extensible Firmware Interface (UEFI) bootkit dubbed BlackLotus that is able to bypass the Secure Boot on Windows 11. Researchers from ESET discovered a new stealthy Unified Extensible Firmware Interface (UEFI) bootkit, named BlackLotus, that is able to bypass Secure Boot on Windows 11. Secure Boot is a security feature of the […] The post BlackLotus is the first bootkit bypassing UEFI Secure Boot on Windows 11 appeared first on Security Affairs.
Microsoft Warns on 'Achilles' macOS Gatekeeper Bypass
A bypass vulnerability in macOS for Apple’s Gatekeeper mechanism may enable cyberattackers to execute malicious functions heading in the right direction Macs — no matter whether or not Lockdown mode is enabled. Among the many particulars on the bug (CVE-2022-42821), which Microsoft dubbed “Achilles,” is the truth that researchers have been in a position to craft a working exploit utilizing the Entry Management Lists (ACL) mechanism in macOS, which permits fine-tuned permissioning for functions.
It’s beginning to look a lot like a ‘scammy’ Christmas: Festive season spam is hitting inboxes, Bitdefender Labs warns
Ad One product to protect all your devices, without slowing them down. Free 90-day trial The Christmas season is full of carols, joy, gifts and spam. Yes, you heard us: spam. As we’re counting the days till Christmas, Bitdefender Antispam Lab has been keeping an eye out for unsolicited emails and email-based threats that could ruin your joyous celebration.
ReasonLabs joins Anti-Malware Testing Standards Organization to strengthen anti-malware solutions
2022-11-22 03:11 ReasonLabs has joined the Anti-Malware Testing Standards Organization (AMTSO), an international non-profit association that focuses on addressing the global need for improvement in the objectivity, quality and relevance of anti-malware testing methodologies.
Google Releases YARA Rules to Disrupt Cobalt Strike Abuse
Google Releases YARA Rules to Disrupt Cobalt Strike Abuse 2022-11-21 22:11 The popular pen-testing tool is often cracked and repurposed by threat actors. Google now has a plan to address that. This article has been indexed from Dark Reading Read the original article: Related
Microsoft Warns Of Hackers Using Google Ads To Distribute Royal Ransomware
A developing threat activity cluster has been found using Google Ads in one of its campaigns to distribute various post-compromise payloads, including the recently discovered Royal ransomware. Microsoft, which spotted the updated malware delivery method in late October 2022, is tracking the group under the name DEV-0569.
Microsoft Warns Of Uptick In Hackers Leveraging Publicly-Disclosed 0-Day Vulnerabilities
Microsoft is warning of an uptick in the nation-state and criminal actors increasingly leveraging publicly-disclosed zero-day vulnerabilities for breaching target environments. The tech giant, in its 114-page Digital Defense Report, said it has "observed a reduction in the time between the announcement of a vulnerability and the commoditization of that vulnerability," making it imperative that organizations patch such exploits in a timely manner.
Microsoft Warns Of Large-Scale Click Fraud Campaign Targeting Gamers
Microsoft said it's tracking an ongoing large-scale click fraud campaign targeting gamers by means of stealthily deployed browser extensions on compromised systems. "[The] attackers monetize clicks generated by a browser node-webkit or malicious browser extension secretly installed on devices," Microsoft Security Intelligence said in a sequence of tweets over the weekend. The tech giant's cybersecurity division is tracking the developing threat cluster under the name DEV-0796.
Rhythm Nation By Janet Jackson Can Crash Computers, Microsoft Warns
Microsoft principal software engineer, Raymond Chen has flagged as harmful to computers Janet Jackson’s 1989 pop hit ‘Rhythm Nation’ The hit track is said to contain a frequency that is dangerous to system. Raymond Chen, who said unnamed colleague discovered the harm Jackson’s song have on computers and laptops around the same vicinity.
Microsoft Warns Of Large-Scale AiTM Phishing Attacks Against Over 10,000 Organizations
Microsoft on Tuesday disclosed that a large-scale phishing campaign targeted over 10,000 organizations since September 2021 by hijacking Office 365's authentication process even on accounts secured with multi-factor authentication (MFA). "The attackers then used the stolen credentials and session cookies to access affected users' mailboxes and perform follow-on business email compromise (BEC) campaigns against other targets," the company's cybersecurity teams reported.
Microsoft Warns Of Cryptomining Malware Campaign Targeting Linux Servers
A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence said in a series of tweets on Thursday.
VMware Completes Its Spin-Off From Dell
VMware has completed its spin-off from Dell, becoming an independent company for the first time in 18 years. VMware is one of the leading virtualization companies. Its software is used by some of the biggest companies in the world, and has been instrumental in the transition to the cloud. The company was bought by EMC in 2004, which was in turn bought by Dell in 2016.
Microsoft Warns of SIP-Bypassing ‘Shrootless’ macOS Vulnerability
Microsoft is warning of a vulnerability impacting macOS that could bypass System Integrity Protection (SIP). SIP prevents unauthorized code from executing on macOS, and is one of the layers Apple employs to keep the OS secure. In particular, SIP is designed to keep an account with root access from doing something that could compromise the system.
Microsoft Warns of Cross-Account Takeover Bug in Azure Container Instances
Microsoft on Wednesday said it remediated a vulnerability in its Azure Container Instances (ACI) services that could have been exploited by a malicious actor "to access other customers' information" in what the researcher described as the "first cross-account container takeover in the public cloud." An attacker exploiting the weakness could execute malicious commands on other users' containers, steal customer secrets and images deployed to the platform.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Microsoft
Contact Microsoft, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack