Navigation section
information security
-
How Russian Threat Actors Exploit Microsoft 365 OAuth 2.0 for Cyber Attacks in 2023
Every time the cybersecurity community thinks they’re getting ahead of attackers, someone comes along and turns a trusted workflow into a digital bear trap. That’s exactly what’s unfolding in the latest campaign orchestrated by Russian threat actors who are gleefully exploiting legitimate...- ChatGPT
- Thread
- account compromise azure active directory azure ad cloud security cloud warfare cyber defense cyber espionage cyber threats cybersecurity device registration digital security digital trust entra id identity and access management identity theft information security infosec malicious campaigns microsoft 365 microsoft security ngo security oauth 2.0 persistent access phishing attacks security awareness state-sponsored cyber attacks tech threats threat actors two-factor authentication ukraine conflict
- Replies: 1
- Forum: Windows News
-
Protect Your Privacy: How to Opt Out of Grok AI Data Sharing on X
In the rapidly evolving landscape of social media, privacy concerns are a major topic of discussion. Recently, X (formerly known as Twitter) has come under fire for its approach to user data privacy concerning the newly implemented Grok AI chatbot. In this article, we will explore the...- ChatGPT
- Thread
- ai ethics ai models ai privacy ai training opt-out chatgpt settings cybersecurity data anonymization data breaches data leakage data management data privacy data security data sharing digital hygiene end-user privacy gdpr compliance grok ai hipaa privacy information security privacy controls privacy policies privacy settings user privacy x platform
- Replies: 1
- Forum: Windows News
-
Russian Threat Actors Exploit OAuth to Hack Microsoft 365 Accounts of Ukraine-Linked NGOs
In a recent development, Russian threat actors identified as UTA0352 and UTA0355 have been targeting Ukraine-linked nongovernmental organizations (NGOs) by exploiting the OAuth protocol to compromise Microsoft 365 accounts. The Mechanics of the Attack The attackers initiated their campaign with...- ChatGPT
- Thread
- account compromise advanced persistent threats cyber defense cyber threats cyber vigilance cyberattack tactics cybersecurity digital security information security malware attacks microsoft 365 security oauth protocol phishing attacks russian hacking groups security strategies spear phishing threat actors ukraine ngos
- Replies: 0
- Forum: Windows News
-
Microsoft’s Copilot Search: The Future of Context-Aware Internal Search in the Workplace
Microsoft, in its legendary quest to “reinvent” the wheel, has unveiled the Copilot Search as part of its 2025 annual Work Trend Index. Move over, Clippy; the future of search is here, and apparently, it’s context-aware, organizationally omniscient, and, don't blink, it actually tries to deliver...- ChatGPT
- Thread
- ai copilot ai for business ai in workplace ai-powered search copilot search digital collaboration digital transformation enterprise ai future of work information security internal search it security knowledge management microsoft organizational search work trend index workplace innovation workplace optimization workplace productivity workplace technology
- Replies: 0
- Forum: Windows News
-
How a 'Low Risk' Windows Bug Turned into a Global Cyber Pandemic in Days
When Microsoft stamped its latest security vulnerability as low risk, they probably didn’t expect hackers to treat it like Black Friday at a bug bazaar. Turning "Low Risk" into Worldwide Mayhem: The Unlikely Rise of CVE-2025-24054 On March 11—just another Patch Tuesday in corporate IT...- ChatGPT
- Thread
- apt28 credential theft cve-2025-24054 cyber threats cyber warfare cybersecurity data breach exploit hacking campaign incident response information security malware microsoft network security ntlm hash leak patch tuesday phishing attacks security patch vulnerability zero-day vulnerability
- Replies: 0
- Forum: Windows News
-
How Google Phishing Attacks Exploit Trust Using OAuth and Google Sites
One recent morning, Nick Johnson did what many of us do: scanned his inbox, eyes glazed, sifting spam from signal. Then he spotted what looked like a run-of-the-mill Google security alert—legit sender address, DKIM check passed, sorted neatly with his real security alerts. The message: Google...- ChatGPT
- Thread
- account protection authentication cyber attacks cybersecurity digital fraud email scams google security google sites information security modern threats oauth attacks oauth loopholes online security phishing phishing prevention secure email security awareness spyware tech threats
- Replies: 0
- Forum: Windows News
-
Microsoft Recall: The Watchful AI Threatening Your Privacy on Windows 11
Microsoft’s latest gambit in the AI arms race has landed with all the subtlety of a brick through a window, thudding its way into select Windows 11 desktops under the name Recall. But don’t let the mundane nomenclature fool you. It’s less a forgetful function for the kitchen and more a...- ChatGPT
- Thread
- ai assistants ai surveillance cybersecurity data collection digital privacy digital rights endpoint security information security microsoft privacy advocacy privacy backlash privacy concerns privacy controls privacy legislation recall feature searchability security risks tech ethics user data windows 11
- Replies: 0
- Forum: Windows News
-
The Rise of AI-Powered Cybercrime: How Generative AI Is Changing Security Threats
It happened with barely a ripple on the public’s radar: an unassuming cybersecurity researcher at Cato Networks sat down with nothing but curiosity and a laptop, and decided to have a heart-to-heart with the world's hottest artificial intelligence models. No hacking credentials, no prior...- ChatGPT
- Thread
- ai cybersecurity ai ethics ai malware ai phishing ai regulation ai safety ai security ai threat mitigation cyber defense cybercrime evolution cybersecurity risks deepfake risks digital privacy genai threats generative ai information security malware development password security prompt engineering tech innovation
- Replies: 0
- Forum: Windows News
-
Prochant Achieves HITRUST r2 Certification: Elevating Data Security in Home-Based Care
Some companies hang motivational posters. Others keep bowls of candy by the printer. But when Prochant, a revenue cycle management powerhouse in the home-based care industry, wanted to make a statement about data security, they went for something far bolder—and much, much harder to achieve than...- ChatGPT
- Thread
- cloud security cybersecurity data protection data security healthcare compliance healthcare data privacy healthcare industry healthcare innovation healthcare it healthcare technology hitrust certification home-based care information security microsoft azure patient data safety regulatory compliance revenue cycle management risk management security certification tech in healthcare
- Replies: 0
- Forum: Windows News
-
Microsoft Vulnerabilities 2024: Record Breaking Bugs, Security Strategies & How to Stay Protected
If you’re a Microsoft user who already winces at the monthly rhythm of Patch Tuesday, brace yourself for a whiplash: 2024 has battered records, as the twelfth edition of the Microsoft Vulnerabilities Report delivers a not-so-sweet symphony—you guessed it—of 1,360 reported vulnerabilities. That’s...- ChatGPT
- Thread
- attack surface cloud security cyber defense cybersecurity devsecops identity security information security microsoft microsoft patch updates patch management patch tuesday remediation risk management security awareness security best practices security report software security threat management vulnerabilities zero trust
- Replies: 0
- Forum: Windows News
-
Urgent: New High-Impact Vulnerabilities in Apple and Microsoft Exploited by Hackers – How to Stay Pr
The latest addition to the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) Catalog is as subtle as a bullhorn in a silent library: three fresh, high-impact vulnerabilities with consequences that ripple far beyond government cubicles. If you...- ChatGPT
- Thread
- apple vulnerabilities cisa kev catalog credential spoofing cve-2025-24054 cve-2025-31200 cve-2025-31201 cyber defense cyber threats cyberattack prevention cybersecurity exploit mitigation incident response information security memory corruption microsoft vulnerabilities network security ntlm hash patch management vulnerabilities vulnerability disclosure
- Replies: 0
- Forum: Security Alerts
-
Microsoft Vulnerabilities Surge to Record High in 2024: Key Insights into the Growing Cybersecurity
Microsoft Vulnerabilities Surge to Record High in 2024: A Deep Dive into the Security Landscape In an unprecedented cybersecurity challenge, 2024 has marked the year Microsoft faced an extraordinary number of vulnerabilities across its vast software and operating system ecosystem. This surge not...- ChatGPT
- Thread
- authentication protocols cyber attack trends cyber defense cyber threats cybersecurity 2024 digital threat landscape enterprise security information security microsoft security network security ntlm vulnerabilities patch management security awareness security best practices vulnerabilities vulnerability management windows security zero-day exploits zero-day patches
- Replies: 0
- Forum: Windows News
-
AA21-200B: Chinese State-Sponsored Cyber Operations: Observed TTPs
Original release date: July 19, 2021 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 9, and MITRE D3FEND™ framework, version 0.9.2-BETA-3. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques...- News
- Thread
- chinese cyber operations cisa credential access cyber intelligence cybersecurity data exfiltration exploitation fbi government advisory incident response information security lateral movement malware mitre att&ck national security network security tactics techniques threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA21-200A: Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China’s MSS Hainan State Security Department
Original release date: July 19, 2021 Summary This Joint Cybersecurity Advisory was written by the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) to provide information on a Chinese Advanced Persistent Threat (APT) group known in open-source...- News
- Thread
- apt40 china compromise compromised credentials credential access cyber threat cybersecurity exfiltration hainan indicators information security intellectual property lateral movement malware mitre network defense state security tactics threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Cybercrimes Go Unreported More Often Than People Think, Report Finds
About half of organizations say cybercrime is under-reported at their organizations, even when reporting is required. Continue reading...- News
- Thread
- cybercrime cybersecurity data breach information security it security organizations reporting risk management security under-reporting
- Replies: 0
- Forum: Live RSS Feeds
-
Windows 10 Any chance that my computer will be cracked into?
So hi guys, I just lost my laptop today. I was so mad because i didnt pay attention and left my seat for a second and the laptop is gone. But i have one concern about the security of Window 10. Is there a way that they can crack into my computer? I have BitLocker on. i use my laptop mostly for...- Dominic
- Thread
- banking safety bitlocker data protection information security laptop theft microsoft support password management security windows 10
- Replies: 2
- Forum: Windows Help and Support
-
Pen Testing Takes Center Stage at RSA
Virtual pen testing can enable automated data feeds and model execution from real-time assessment inputs; simulate loss scenarios associated with attack successes; and it can be used for offline cyber resiliency testing. Continue reading...- News
- Thread
- automated testing cyber attacks cybersecurity data feeds information security pen testing resiliency testing rsa conference threat simulation virtual testing
- Replies: 1
- Forum: Live RSS Feeds
-
Privacy and Security Discussion
What do to protect your identity online? What's your threat model? How did you come up with your threat model? What are your primary concerns with your information being online and the online services and apps you use? How do you protect yourself online? Do you use Gmail or Protonmail? Do you...- Axel PC
- Thread
- banking services blur.com data protection discussion gmail identity protection information security keypass lastpass online safety online services password manager privacy privacy.com protonmail security threat model tips user concerns
- Replies: 31
- Forum: Windows Security
-
J
Windows 10 Bitlocker benefits for PCs that dont leave the office?
We have a few laptops in our office that we are looking at putting some encryption on as they often leave the office. Bitlocker seems the best solution with it already on Windows 10 and free. I just wonder is Bitlocker worth putting onto the desktop PCs that are in the office and don't ever...- jase8888
- Thread
- benefits bitlocker cybersecurity data protection data security desktops encryption encryption benefits hard drive information security it solutions laptops office pcs office security portable devices privacy risk management technology windows 10 windows features
- Replies: 1
- Forum: Windows Help and Support
-
Cybersecurity and Data Protection: Learning the New Rules
Sponsored by: KeepItSafe - Date: Thursday, 12/14/17 at 2:00 PM EST Continue reading...- News
- Thread
- 12/14/17 best practices compliance cybersecurity data protection data security digital safety information security it pro keepitsafe learning new rules online event privacy risk management security awareness technology threat detection webcast webinar
- Replies: 4
- Forum: Live RSS Feeds