Opsec Asia Microsoft

Category Archives: Microsoft

Pwn2Own 2021: Zoom, Teams, Exchange, Chrome and Edge “fully owned”

April 9 2021 By Paul Ducklin in Apple, Exploits, Google, Linux, Microsoft, Security, vulnerabilities, Vulnerability, Windows

Two lucky winners scooped $200k for just 20 minutes' work - if you don't count the days, weeks and months of meticulous effort beforehand

More on the Chinese Zero-Day Microsoft Exchange Hack

March 10 2021 By Bruce Schneier in China, cybersecurity, Microsoft, Security, Zero-day

Nick Weaver has an excellent post on the Microsoft Exchange hack:

The investigative journalist Brian Krebs has produced a handy timeline of events and a few things stand...
Read more

Serious Security: Webshells explained in the aftermath of HAFNIUM attacks

March 9 2021 By Paul Ducklin in Malware, Microsoft, Security, Vulnerability, Zero-day

Webshells explained, with some (safe) examples you can try at home if you want to learn more.

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation...

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Four Microsoft Exchange Zero-Days Exploited by China

March 4 2021 By Bruce Schneier in China, Microsoft, Security, vulnerabilities, Zero-day

Microsoft has issued an emergency Microsoft Exchange patch to fix four zero-day vulnerabilities currently being exploited by China. EDITED TO ADD (3/12): Exchange Online is not affected.

Chinese Hackers Stole an NSA Windows Exploit in 2014

March 4 2021 By Bruce Schneier in China, Exploits, Microsoft, nsa, Security, Windows

Check Point has evidence that (probably government affiliated) Chinese hackers stole and cloned an NSA Windows hacking tool years before (probably government affiliated) Russian hackers stole and then...

Twelve-Year-Old Vulnerability Found in Windows Defender

February 24 2021 By Bruce Schneier in Malware, Microsoft, Security, vulnerabilities, Windows

Researchers found, and Microsoft has patched, a vulnerability in Windows Defender that has been around for twelve years. There is no evidence that anyone has used the vulnerability...