Tag: microsoft

February 8, 2024

Microsoft is in talks with Cloud Infrastructure Services Providers in Europe (CISPE) to settle the trade body’s complaint about its cloud software licensing practices in the European Union (EU). “Today, CISPE confirms that it has opened discussions with Microsoft aimed […]

January 10, 2024

Poorly secured Microsoft SQL servers in the US, EU, and LATAM are being attacked by financially motivated Turkish threat actors in an ongoing campaign to deliver MIMIC ransomware payloads, according to a Securonix research. The financial cyberthreat campaign named RE#TURGENCE […]

December 27, 2023

ChatGPT is still the fastest-growing consumer technology product of all time, but it achieved that in large part by crawling the internet and training itself on the backs of every website it could get its hands on. Is that okay? […]

October 13, 2023

Microsoft disputes the IRS’ claims and says it followed all rules and paid all the taxes it ever owed, both in the U.S. and around the world. The company also claimed that it has been one of the top U.S. […]

August 1, 2023

Hacking teams working for the Chinese government are intent on burrowing into the farthest reaches of US infrastructure and establishing permanent presences there if possible. In the past two years, they have scored some wins that could seriously threaten national […]

July 12, 2023

Microsoft has disclosed that that a cyberattack by a China-based “nation-state actor” managed to access email hosted on Exchange Online and Outlook.com belonging to about 25 organizations, including government agencies. Mitigation of the attack is complete, according to a statement […]

May 25, 2023

Microsoft said that the hackers, codenamed Volt Typhoon, have been in operation since mid-2021. By exploiting vulnerabilities in internet-facing Fortinet FortiGuard devices that admins never patched, the attackers are able to extract credentials to a network’s Active Directory, and use […]

February 28, 2023

Microsoft clearly has more than a few kinks to work out in its new AI-powered Bing chat before it’s ready for primetime, but that isn’t stopping the company from expanding the feature throughout its ecosystem at a surprisingly rapid pace. […]

February 1, 2023

The January patching window for your firm has probably come and gone. But has it? While January included a huge release of patches, several releases in other months have provided more than one headache for the patch management community. These […]

November 11, 2022

Microsoft on Thursday fingered Russia’s military intelligence arm as the likely culprit behind ransomware attacks last month that targeted Polish and Ukrainian transportation and logistics organizations. If the assessment by members of the Microsoft Security Threat Intelligence Center (MSTIC) is […]

April 4, 2022

In a rather scathing blog post, Google criticized the dominance of Microsoft’s productivity software currently in use across US federal and state governments for the security risks and vulnerability associated with the ‘legacy’ tools. While there is truth to Google’s […]

March 1, 2022

Microsoft has been pushing harder to increase the baseline security features of Windows PCs for a couple of years now—the “secured-core PC” initiative launched back in 2019 was meant to guard against firmware-level attacks, and Windows 11’s system requirements mandate […]

February 16, 2022

Logging can be the most useful tool in your security arsenal, but it’s something we all tend to overlook and not assign appropriate resources to, as it can use up hard drive storage. Proper logs can provide evidence as to […]

February 15, 2022

Oracle announced Tuesday that it can now host some of the U.S. federal government’s top secret/sensitive compartmented information (TS/SCI) and special access program mission data in its Oracle Cloud Infrastructure platform. According to the company, Defense Department assessors granted it […]

December 15, 2021

Unless you’ve been on a remote island without Internet access, you’ve seen the headlines and articles regarding the vulnerability in the logging software called Log4j. Log4j is a Java-based logging library used in many third-party applications. It is also part […]

October 27, 2021

The group of hackers responsible for the SolarWinds software supply chain attack have continued to seek out ways of indirectly gaining access to enterprise networks by targeting IT and cloud services providers that have admin rights on their customers’ systems […]

October 12, 2021

Google has launched a new service group — the Google Cybersecurity Action Team — to provide strategic advisory, compliance, threat intelligence, and incident response services aimed at helping government and corporate clients tackle complex cybersecurity efforts, the company announced today […]

October 8, 2021

Russia is the source of the lion’s share of nation-state cyberattacks Microsoft has observed in the past year (58%), followed by North Korea (23%), Iran (11%), China (8%), and South Korea, Vietnam, and Turkey all with less than 1% representation, […]

September 28, 2021

Last year, ByteDance was ordered by then-US President Donald Trump to separate TikTok from its Chinese operations, or else face a country-wide ban. Following a national security review by the US Committee on Foreign Investments, the company was forced to […]

September 24, 2021

In addition to Su, Nvidia chief scientist Dr. William Dally, Microsoft chief scientific officer Dr. Eric Horvitz, and Google Cloud chief information security officer Phil Venables are joining PCAST. The three chairs leading the council will be California Institute of […]