Remove Accountability Remove Antivirus Remove Information Security Remove Security Intelligence
article thumbnail

Microsoft Defender can now protect servers against ProxyLogon attacks

Security Affairs

Microsoft announced that its Defender Antivirus and System Center Endpoint Protection now protects users against attacks exploiting Exchange Server vulnerabilities. “Today, we have taken an additional step to further support our customers who are still vulnerable and have not yet implemented the complete security update. .

Antivirus 126
article thumbnail

Microsoft blocked Polonium attacks against Israeli organizations

Security Affairs

Threat actors were observed abusing OneDrive, for this reason, the IT giant has suspended more than 20 malicious OneDrive applications created by POLONIUM actors, notified affected organizations, and deployed a series of security intelligence updates that will quarantine malicious tools developed by the attackers.

article thumbnail

European firm DSIRF behind the attacks with Subzero surveillance malware

Security Affairs

com Running PowerShell scripts directly from a GitHub gist created by an account associated with DSIRF. Researchers from threat intelligence firm RiskIQ, using passive DNS data related to Knotweed attacks, linked the C2 infrastructure used by the malware since February 2020 to DSIRF. .” or later to detect the related indicators.