Microsoft is once again raising the bar in enterprise email security with the rollout of Mail Bombing Detection in Microsoft Defender for Office 365, a move set to strengthen defenses against one of the most disruptive cyberattack trends affecting organizations worldwide—email bombing. As attack...
Email bombing, a form of cyberattack where attackers flood a target's inbox with a massive volume of emails, has become an increasingly prevalent threat. This tactic aims to overwhelm users, making it challenging to access legitimate communications and potentially disrupting organizational...
Microsoft’s ongoing investment in enterprise security takes a significant leap forward with the rollout of a sophisticated feature in Microsoft Defender for Office 365: advanced detection and mitigation of email bombing attacks. As cybercriminal tactics grow in complexity and frequency...
Hackers are increasingly exploiting one of Microsoft 365’s lesser-known conveniences—Direct Send—to launch sophisticated phishing campaigns that closely mimic internal communications, putting even well-defended organizations at serious risk. As recent research from Varonis and corroborating...
In a sobering development for the cloud security landscape, new research has exposed how Microsoft 365’s Direct Send feature—a tool primarily designed for seamless internal communication—has become a significant vector for phishing attacks. As organizations of all sizes deepen their reliance on...
Microsoft has unveiled a new security feature within its Defender for Office 365 suite aimed at mitigating the rising threat of email bombing attacks. This feature, termed "Mail Bombing Detection," is designed to automatically identify and quarantine high-volume email flooding campaigns that...
Microsoft Outlook, as one of the most widely adopted email clients across enterprise and consumer environments, frequently finds itself at the center of security research and, consequently, vulnerability bulletins. Cases of remote code execution (RCE) vulnerabilities within Outlook have...
Severity Rating: Critical
Revision Note: V1.0 (March 12, 2013): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Silverlight. The vulnerability could allow remote code execution if an attacker hosts a website that...
Severity Rating: Important
Revision Note: V1.0 (September 11, 2012): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Visual Studio Team Foundation Server. The vulnerability could allow elevation of privilege if a user clicks...
Severity Rating: Critical
Revision Note: V1.0 (August 14, 2012): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Windows common controls. The vulnerability could allow remote code execution if a user visits a website...
Severity Rating: Important
Revision Note: V1.0 (June 12, 2012): Bulletin published.
Summary: This security update resolves one privately reported vulnerability in Microsoft Dynamics AX Enterprise Portal. The vulnerability could allow elevation of privilege if a user clicks...
Severity Rating: Important
Revision Note: V1.0 (October 11, 2011): Bulletin published.
Summary: This security update resolves five privately reported vulnerabilities in Forefront Unified Access Gateway (UAG). The most severe of these vulnerabilities could allow remote code...
Bulletin Severity Rating:Critical - This security update resolves a privately reported vulnerability in the JScript and VBScript scripting engines. The vulnerability could allow remote code execution if a user visited a specially crafted Web site. An attacker would have no way to force users to...
Bulletin Severity Rating:Critical - This security update resolves a publicly disclosed vulnerability in the Windows Help and Support Center feature that is delivered with supported editions of Windows XP and Windows Server 2003. This vulnerability could allow remote code execution if a user...
Severity Rating: Critical - Revision Note: V1.0 (July 13, 2010): Bulletin published.Summary: This security update resolves a publicly disclosed vulnerability in the Windows Help and Support Center feature that is delivered with supported editions of Windows XP and Windows Server 2003. This...