#microsoft

Browser adds defense in depth to prevent abuse of unpatched vulnerabilities

New time series model and enhanced alerting experience make it easy for organizations to address more threats in the cloud while enabling faster investigations.

Machine-learning algorithms alone may miss signs of a successful attack on your organization.

Regulators are close to stopping Meta from sending EU data to the US, bringing a years-long privacy battle to a head.

By Deeba Ahmed The US Treasury Department has blacklisted Tornado Cash on the accusation that the platform helped bad actors harvest… This is a post from HackRead.com Read the original post: US Blacklists Tornado Cash, GitHub Removes Co-Founder in Response

In what's yet another instance of malicious packages creeping into public code repositories, 10 modules have been removed from the Python Package Index (PyPI) for their ability to harvest critical data points such as passwords and Api tokens. The packages "install info-stealers that enable attackers to steal developer's private data and personal credentials," Israeli cybersecurity firm Check

Over a dozen military-industrial complex enterprises and public institutions in Afghanistan and Europe have come under a wave of targeted attacks since January 2022 to steal confidential data by simultaneously making use of six different backdoors. Russian cybersecurity firm Kaspersky attributed the attacks "with a high degree of confidence" to a China-linked threat actor tracked by Proofpoint

Sharing information through the Security Update Guide (SUG) is an important part of our ongoing effort to help customers manage security risks and keep systems protected. In January 2022 we introduced Phase One of a new way for customers to receive email notifications about new Microsoft product security content using any email address, not just a Microsoft account, or Live ID as it is sometimes known.

**What version of Azure Sphere has the update that protects from this vulnerability?** All versions of Azure Sphere that are 22.07 and higher are protected from this vulnerability. **How do I ensure my Azure Sphere device has the update?** If your device is new or has not been connected to the internet for a while, connect the device to a secure, private local network with internet access and allow the device to automatically update itself. If the device is already online, verify that the operating system version 21.07 has been installed using the Azure Sphere CLI command: azsphere device show-os-version If the device is connected to the internet and does not yet have the latest update, check the update status with the following Azure Sphere CLI command: azsphere device show-deployment-status **Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?** An IoT device that is running Azure Sphere and is ...

**Is the Preview Pane an attack vector for this vulnerability?** No, the Preview Pane is not an attack vector.