Security Affairs

SEPTEMBER 24, 2020

pic.twitter.com/POppQ51uMX — Microsoft Security Intelligence (@MsftSecIntel) September 22, 2020. Recent spam campaigns used messages with malicious Word documents, or links to them, pretending to be an invoice, shipping information, COVID-19 information , resumes, financial documents, or scanned documents.

Malware 126

Malware Passwords Advertising Cybercrime 126

Security Affairs

JUNE 10, 2019

Spam messages are carrying weaponized RTF documents that could infect users with malware without any user interaction, just opening the RTF documents. pic.twitter.com/Ac6dYG9vvw — Microsoft Security Intelligence (@MsftSecIntel) June 7, 2019. Windows Defender ATP detects the documents as Exploit:O97M/CVE-2017-11882.AD

Security Intelligence 71

Security Intelligence Advertising Malware Information Security 71

Security Affairs

FEBRUARY 2, 2020

pic.twitter.com/mcRyEBUmQH — Microsoft Security Intelligence (@MsftSecIntel) January 30, 2020. pic.twitter.com/1qnx3NmwiB — Microsoft Security Intelligence (@MsftSecIntel) January 30, 2020. When opened, the HTML leads to the download Dudear, a malicious macro-laden Excel file that drops the payload.

Malware 79

Malware Security Intelligence Banking Phishing 79

Security Affairs

JUNE 24, 2019

The macro included in the documents executes the legitimate msiexec.exe tool that downloads an MSI archive. pic.twitter.com/PQ2g7rvDQm — Microsoft Security Intelligence (@MsftSecIntel) June 21, 2019. — Microsoft Security Intelligence (@MsftSecIntel) June 21, 2019.

Security Intelligence 82

Security Intelligence Advertising Malware Banking 82

Cisco Security

AUGUST 30, 2021

This list was originally compiled as a standard awareness document for developers and web application security practitioners. It represents a broad consensus about the most critical security risks to APIs. This plan document is the perfect addition to an existing governance policy. Maps to API1,API2,API5, and API6.

Software 111

Software Authentication Risk Encryption 111

Security Affairs

SEPTEMBER 18, 2021

Our researchers are closely monitoring the campaign and will share additional info and investigation guidance through Microsoft 365 security center and Microsoft Threat Experts. — Microsoft Security Intelligence (@MsftSecIntel) May 11, 2021.

Malware 99

Malware Phishing DNS Cybercrime 99

Security Affairs

OCTOBER 30, 2020

It will then provide recommendations on how organizations can secure each of these components. Per Kubernetes’ documentation , kube-apiserver is the front end for the Kubernetes control plane. For information on how to secure that part of a Kubernetes cluster, click here. kube-apiserver. What it is.

Advertising 95

Advertising Internet Internet VPN 95

Security Affairs

APRIL 29, 2021

The tools used by Longhorn closely follow development timelines and technical specifications laid out in documents disclosed by WikiLeaks.”. Symantec has been protecting its customers from Longhorn’s tools for the past three years and has continued to track the group in order to learn more about its tools, tactics, and procedures.”

Malware 107

Malware Hacking Government Telecommunications 107

Security Affairs

NOVEMBER 11, 2019

Read our latest blog w/ assist from @GossiTheDog & @MalwareTechBlog [link] — Microsoft Security Intelligence (@MsftSecIntel) November 7, 2019. While we currently see only coin miners being dropped, we agree w/ the research community that CVE-2019-0708 (BlueKeep) exploitation can be big. ” Noble added.

Small Business 63

Small Business Malware Cryptocurrency Advertising 63

Security Affairs

MARCH 19, 2021

According to its documentation , Kubernetes comes with load balancing features that help to distribute high network traffic and keep the deployment stable. The guidance provided above can help admins ensure container runtime security in Amazon EKS. For more information about other aspects of Amazon EKS security, click here.

Information Security 80

Information Security Security Intelligence Hacking Accountability 80

Security Affairs

NOVEMBER 17, 2021

Over the past year, Microsoft Threat Intelligence Center (MSTIC) has observed an evolution of the tools, techniques, and procedures employed by Iranian nation-state actors. Learn more from this blog summarizing these trends, as presented at #CyberWarCon : [link] — Microsoft Security Intelligence (@MsftSecIntel) November 16, 2021.

VPN 106

VPN Social Engineering Accountability Media 106

Lenny Zeltser

MAY 3, 2019

To understand the basis for these recommendations, read the documents mentioned at the end of the post. Attackers stole sensitive documents. Adversaries have routinely pursued sensitive campaign documents. Consider when to send attachments and when to share links to documents in cloud storage. campaigns from around 2016.

Cybersecurity 111

Cybersecurity Social Engineering Authentication Software 111