Navigation section
threat landscape
-
Inside the MSRC – How we recognize our researchers
This is the first of a series of blog entries to give some insight into the Microsoft Security Response Center (MSRC) business and how we work with security researchers and vulnerability reports. The Microsoft Security Response Center actively recognizes those security researchers who help us...- News
- Thread
- acknowledgement awards bug bounty community customer security cve engagement insights microsoft monthly bulletin online services operational security researchers response center security security research security update submissions threat landscape vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA16-288A: Heightened DDoS Threat Posed by Mirai and Other Botnets
Original release date: October 14, 2016 | Last revised: November 30, 2016 Systems Affected Internet of Things (IoT)—an emerging network of devices (e.g., printers, routers, video cameras, smart TVs) that connect to one another via the Internet, often automatically sending and receiving data...- News
- Thread
- attack mitigation bashlite botnets cybersecurity ddos default passwords device protection digital devices firmware update iot krebs security malware mirai network security password security sock vulnerabilities tcp port telecom security threat landscape vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Update on Petya malware attacks
As happened recently with WannaCrypt, we again face a malicious attack in the form of ransomware, Petya. In early reports, there was a lot of conflicting information reported on the attacks, including conflation of unrelated and misleading pieces of data, so Microsoft teams mobilized to...- News
- Thread
- attack surface cve-2017-0144 cve-2017-0145 cybercrime device guard investigation malware malware protection microsoft network segmentation petya protection ransomware security smbv1 threat landscape update vulnerability windows 10
- Replies: 0
- Forum: Security Alerts
-
June 2017 security update release
Microsoft releases additional updates for older platforms to protect against potential nation-state activity Today, as part of our regular Update Tuesday schedule, we have taken action to provide additional critical security updates to address vulnerabilities that are at heightened risk of...- News
- Thread
- automatic updates critical updates customer guidance defense innovations legacy support nations-state threats security threat landscape update update catalog windows 10 windows 7 windows 8.1 windows server 2008 windows server 2008 r2 windows server 2012 windows server 2012 r2 windows server 2016 windows vista windows xp
- Replies: 0
- Forum: Security Alerts
-
Advancing Security for Consumers and Enterprises at Every Layer of the Windows 10 Stack
We are truly in the midst of a revolution of cyber threats and, to everyone’s frustration, attackers have had the advantage for quite some time. The adversaries that enterprises face today are increasingly well-funded and they are experts at breaching well-fortified environments and deriving...- News
- Thread
- anniversary update bitlocker compliance credential guard cyber threats data protection enterprise security fips hardware isolation identity protection malware protection microsoft edge post-breach defense pre-breach defense security smartscreen threat landscape virtualization windows 10 windows defender
- Replies: 0
- Forum: Live RSS Feeds
-
Security Advisory 3010060 released
Today, we released Security Advisory 3010060 to provide additional protections regarding limited, targeted attacks directed at Microsoft Windows customers. A cyberattacker could cause remote code execution if someone is tricked into opening a maliciously-crafted PowerPoint document that contains...- News
- Thread
- advisory anti-virus computer security cyberattack emet firewall fix it guidance malware microsoft office ole powerpoint protection remote code execution security spyware suggested actions threat landscape updates windows
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2914486
Today we released Security Advisory 2914486 regarding a local elevation of privilege (EoP) issue that affects customers using Microsoft Windows XP and Server 2003. Windows Vista and later are not affected by this local EoP issue. A member of the Microsoft Active Protections Program (MAPP) Link...- News
- Thread
- advisory anti-virus cybersecurity email safety firewalls local privilege malicious pdf microsoft protect your computer remote code execution security security update server 2003 tech support threat landscape updates user guidance windows xp workarounds
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2896666
Today we released Security Advisory 2896666 regarding an issue that affects customers using Microsoft Windows Vista and Windows Server 2008, Microsoft Office 2003 through 2010, and all supported versions of Microsoft Lync. We are aware of targeted attacks, largely in the Middle East and South...- News
- Thread
- anti-virus customer guidance emet exploit firewall malware microsoft microsoft office risk management security advisory software updates threat landscape tiff codec user interaction vulnerability windows server windows vista
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2887505
Today we released Security Advisory 2887505 regarding an issue that affects Internet Explorer. There are only reports of a limited number of targeted attacks specifically directed at Internet Explorer 8 and 9, although the issue could potentially affect all supported versions. This issue could...- News
- Thread
- active scripting activex controls advisory anti-virus cve-2013-3893 cybersecurity firewall fix it internet explorer microsoft mitigation remote code execution response communications security security zones software updates threat landscape trusted sites user caution vulnerability
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2847140
Today, we released Security Advisory 2847140 regarding an issue that impacts Internet Explorer 8. Internet Explorer 6, 7, 9 and 10 are not affected by the vulnerability. This issue allows remote code execution if users browse to a malicious website with an affected browser. This would typically...- News
- Thread
- activex controls advisory anti-virus customer protection firewall guidance internet explorer microsoft mitigations remote code execution scripting security threat landscape upgrade vulnerability
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2794220
Today, we released Security Advisory 2794220 regarding an issue that impacts Internet Explorer 6, 7, and 8. We are only aware of a very small number of targeted attacks at this time. This issue allows remote code execution if users browse to a malicious website with an affected browser. This...- News
- Thread
- activex advisory anti-virus blog emet exploit firewalls internet explorer malware microsoft mitigations remote code execution scripting security security zone threat landscape trusted sites updates usability vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Security Advisory 2755801 addresses Adobe Flash Player issues
Today we released Security Advisory 2755801 that addresses vulnerabilities in Adobe Flash Player in Internet Explorer 10 on Windows 8. The majority of customers have automatic updates enabled and will not need to take any action because protections will be downloaded and installed automatically...- News
- Thread
- adobe advisory automatic coordination customers disclosure flash player internet explorer management microsoft protection quality release timing security software threat landscape update update process vulnerabilities windows 8
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2757760
Today we released Security Advisory 2757760 to address an issue that affects Internet Explorer 9 and earlier versions if a user views a website hosting malicious code. Internet Explorer 10 is not affected. We have received reports of only a small number of targeted attacks and are working to...- News
- Thread
- activex advisory anti-spyware antivirus emet exploit prevention firewall internet explorer malicious code mitigations scripting security security settings threat landscape trusted sites updates usability user guidance web browsing
- Replies: 0
- Forum: Security Alerts
-
Proof-of-Concept Code available for MS12-020
On March 15, we became aware of public proof-of-concept code that results in denial of service for the issue addressed by MS12-020, which we released Tuesday. We continue to watch the threat landscape and we are not aware of public proof-of-concept code that results in remote code execution...- News
- Thread
- active protections program confidential information customer protection cve-2012-0002 denial of service deployment mapp program microsoft mitigation ms12-020 optimal decisions proof-of-concept remote code execution security security update software partners threat landscape trustworthy computing update vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Announcing the BlueHat Prize for Advancement of Exploit Mitigations
Protecting the general computing ecosystem is a really tough job, and given some of the media headlines, it’s easy to get discouraged and wallow in the problems. It seems like we’re constantly bombarded with statistics measuring the number of bugs, vulnerabilities, or attacks in an...- News
- Thread
- active protections program bluehat prize cash prizes collaboration computing ecosystem customer solutions cybersecurity defensive technology exploit mitigation global security incentives industry collaboration innovation microsoft research community security challenges security providers security research threat landscape vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
March 2011 Security Bulletin Release
Hello all -- Today, as part of our monthly security bulletin release, we have three bulletins addressing four vulnerabilities in Microsoft Windows and Microsoft Office. One bulletin is rated Critical, and this is the bulletin we recommend for priority deployment: Link Removed due to 404...- News
- Thread
- bulletin critical deployment dll exploitability important march 2011 mhtml microsoft monitoring office remote desktop security service pack technet threat landscape updates vulnerabilities webcast windows
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2488013
Hello, Today we released Security Advisory 2488013 to address a public vulnerability that could affect customers using Internet Explorer 6, 7 and 8 if they visit a website hosting malicious code. Currently the impact of this vulnerability is limited and we are not aware of any affected...- News
- Thread
- advisory anti-virus customer protection data protection firewall internet explorer malicious code malicious sites malware microsoft protected mode risk management security security update software security technical guidance threat landscape updates vulnerability windows vista
- Replies: 0
- Forum: Security Alerts
-
November 2010 Security Bulletin Release
Hello all. As part of our usual cycle of monthly updates, todayMicrosoft is releasing three security bulletins, addressing 11 vulnerabilities.One of the bulletins has a Critical severity rating, while the other two arerated Important. Recapping the trio: Link Removed due to 404 Error This...- News
- Thread
- cybersecurity deployment priority exploitability index malicious file microsoft office november 2010 outlook patch management powerpoint remote code execution response communications risk assessment security bulletin security updates technical webcast threat landscape unified access gateway user interaction vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Black Hat 2010
BH Landscape Next week, many of us here will be heading down to Las Vegas for Black Hat. The MSRC, and other teams in Microsoft, have been attending Black Hat for years. In fact, we've been sponsoring the show for the last eight years-the last five as a platinum sponsor. Some might ask why...- News
- Thread
- attacks black hat bluehat collaboration community coordinated disclosure crisis management disclosure fixit microsoft msrc network protection research security telemetric threat landscape training trustworthy computing update vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Out of Band Release to Address Microsoft Security Advisory 2416728
Hello - Today we provided Link Removed due to 404 Error to customers that we will release an out-of-band security update to address the vulnerability discussed in Security Advisory Link Removed due to 404 Error. The update is scheduled for release tomorrow, Tuesday, September 28, 2010 at...- News
- Thread
- .net framework advisory asp.net automatic update bulletin customer support distribution download center enterprise microsoft out-of-band security testing threat landscape trustworthy computing update vulnerability web server webcast windows server
- Replies: 0
- Forum: Security Alerts