In a continuous effort to bolster email security, Microsoft has announced an expansion of its list of blocked file types for attachments in Outlook on the Web and the New Outlook for Windows. Starting in early July 2025, the company will add two new file extensions to the BlockedFileTypes list...
Phishing attacks have reached new levels of sophistication, as demonstrated by a recently intercepted campaign targeting Microsoft 365 users and using meticulously engineered techniques to breach the defenses of even security-aware organizations. This particular attack, identified and blocked by...
Proofpoint’s headline-grabbing $1 billion agreement to acquire Hornetsecurity marks a pivotal moment in the rapidly evolving landscape of cloud security, underscoring the intensifying arms race among vendors to secure Microsoft 365-powered businesses. As email threats become increasingly...
Exchange Online, a critical part of the Microsoft 365 ecosystem, has once again found itself under scrutiny following another high-profile incident involving its anti-spam detection systems. Beginning on April 25, a wave of Gmail emails intended for Exchange Online users were suddenly and...
To understand the state of EUC (end-user computing) security in 2025, you don’t need a crystal ball—just good shoes. At least, that’s the consensus after navigating the RSA Conference’s sprawling Moscone Center, where tracking down the future of endpoint and email security looks suspiciously...
The Ultimate Guide to the Best Email Security Solutions in 2025
In a world where email remains at the very core of business communication, the prevalence of cyber threats targeting this medium has never been higher. As we step into 2025, the sophistication of attacks has intensified, with...
Imagine logging into your Microsoft 365 account only to find a threatening email that feels too real to dismiss. Unfortunately, this vivid nightmare has recently come true for many users across the globe. In a concerning security incident, hackers have exploited Microsoft 365's official...
With Office 365, we continue to invest in new protections against malicious email attacks. Today Shobhit Sahay from the Office 365 team walks through seven new Exchange Online Protection (EOP) and Advanced Threat Protection (ATP) features that proactively identify and block the most dangerous...
Severity Rating: Moderate
Revision Note: V1.0 (November 11, 2014): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker places a specially crafted TrueType font on a...
bulletin
compromised websites
denial of service
emailthreats
exploit
internet safety
kernel-mode
microsoft
moderate rating
network sharing
november 2014
security
technical article
truetype
update
user content
vulnerability
web attack
windows
Severity Rating: Important
Revision Note: V1.0 (October 14, 2014): Bulletin published.
Summary: This security update resolves a publicly disclosed vulnerability in ASP.NET MVC. The vulnerability could allow security feature bypass if an attacker convinces a user to click a specially crafted link...
Severity Rating: Important
Revision Note: V1.0 (October 14, 2014): Bulletin published.
Summary: This security update resolves a publicly disclosed vulnerability in ASP.NET MVC. The vulnerability could allow security feature bypass if an attacker convinces a user to click a specially crafted link...
asp.net
browser
compromised websites
content exploit
cve
cybersecurity
emailthreats
feature bypass
internet safety
link exploitation
malware
microsoft
patch
security
security flaw
update
user awareness
user interaction
vulnerability
web attack
Severity Rating: Critical
Revision Note: V1.1 (January 8, 2013): Corrected download links for Microsoft XML Core Services 3.0 on Windows Server 2003 with SP2 for Itanium-based Systems and for Microsoft XML Core Services 6.0 when installed on Windows Server 2003 with SP2 for...
affected software
attack vector
critical update
emailthreats
execution
extended security updates
informational change
internet explorer
ms11-003
remote code execution
revision note
security
server core
service pack
update
users
vulnerabilities
windows server
xml
Severity Rating: Critical
Revision Note: V1.0 (August 14, 2012): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Windows common controls. The vulnerability could allow remote code execution if a user visits a website...
Severity Rating: Important
Revision Note: V1.0 (August 9, 2011): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Report Viewer. The vulnerability could allow information disclosure if a user views a specially...
IDG News Service - Web mail users at Yahoo and Hotmail have been hit with the same kind of targeted attacks that were disclosed earlier this week by Google, according to security software vendor Trend Micro.
Trend Micro described two similar attacks against Yahoo Mail and Windows Live Hotmail...