vulnerable Bugcrowd to Advance DevSecOps

Microsoft Launches an AI Bug Bounty Program

As Microsoft aggressively integrates AI into its broad portfolio of products and services, the IT giant now is looking for help to ensure they are free of vulnerabilities. The company this month ...
Security Boulevard

Microsoft’s October security update for multiple high-risk product vulnerabilities

Overview On October 11, NSFOCUS CERT monitored that Microsoft had released a security update patch for October, fixing 104 security problems, involving Microsoft WordPad, Skype for Business, Windows Layer 2 Tunneling Protocol, ...
Patch Tuesday, October 2023 Edition

Patch Tuesday, October 2023 Edition

Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released ...
AD Active Directory microservices

Securing Active Directory and Azure AD

As enterprises have shifted to the cloud, Azure AD has been the natural way to extend the Active Directory paradigm ...
Security Boulevard
Microsoft bug bounty AI LockBit ransomware

ZenRAT Targets Windows Users with Fake Bitwarden Site

Hackers are using a bogus download page for Bitwarden’s password manager solution to target Windows users with a new remote access trojan (RAT) that’s designed to steal credentials and a range of ...
Security Boulevard
AI, Passkeys, attacks, Amazon passkey phishing

Microsoft Brings Passkey Support to Windows 11

Microsoft, long a proponent of doing away with passwords for authentication, is now supporting passkeys in the latest update to the Windows 11 operating system. The IT giant last year joined Google, ...
Security Boulevard
generative AI security, Microsoft AI cybersecurity

Microsoft AI Researchers Exposed 38TB Private Info

The rush to embrace AI has increased the potential for security problems. Microsoft is just the latest example ...
Security Boulevard

Workstations At Risk: Unveiling the RCE Bug

Recently, the world was made aware of a major vulnerability lurking within Windows Themes, tagged as CVE-2023-38146. This vulnerability, called ‘ThemeBleed,’ has a high severity rating of 8.8 and has sparked worry ...
CISA China Volt Typhoon

China Accuses US of Years of Cyber-Spying, Malware Campaigns

| | china espionage, Microsoft, nsa, spying
The Chinese government is accusing the United States intelligence community of launching cyber-espionage campaigns against the country for years after hacking into Huawei servers as far back as 2009. China’s Ministry of ...
Security Boulevard
FBI Hacker Dropped Stolen Airbus Data on 9/11

FBI Hacker Dropped Stolen Airbus Data on 9/11

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBI's vetted information sharing network InfraGard, and was selling the contact information for all 80,000 ...

Secure Guardrails