microsoft office 365 – PossibleThreat Articles

Microsoft Patch Tuesday, August 2025 Edition

August 12, 2025 0 Comments Akamai, badsuccessor, ben mccarthy, cve-2025-50165, cve-2025-53733, cve-2025-53766, cve-2025-53778, cve-2025-53779, exchange online, exchange server 2016, exchange server 2019, exchange server subscription edition, immersive, Latest Warnings, microsoft exchange server, microsoft office 365, Microsoft Word, sans internet storm center, The Coming Storm, Time to Patch, windows gdi+, yuval gordon

Credit to Author: BrianKrebs| Date: Tue, 12 Aug 2025 22:14:41 +0000

Microsoft today released updates to fix more than 100 security flaws in its Windows operating systems and other software. At least 13 of the bugs received Microsoft’s most-dire “critical” rating, meaning they could be abused by malware or malcontents to gain remote access to a Windows system with little or no help from users.

Security Sophos

Sophos MDR intercetta due campagne di ransomware che utilizzano l”email bombing” e il “vishing” di Microsoft Teams

February 6, 2025 0 Comments black basta, featured, Fin7, java malware, legitimate service abuse, microsoft office 365, python malware, quick assist, remote machine management, security operations, stac5143, stac5777, teams, threat research

Credit to Author: Giusy Martin| Date: Thu, 23 Jan 2025 07:13:28 +0000

Sophos MDR ha inoltre identificato un nuovo cluster di minacce che si rifà allo schema di Storm-1811 e un’attività più intensa di quella originale collegata al ransomware Black Basta

Security Sophos

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

January 21, 2025 0 Comments black basta, featured, Fin7, java malware, legitimate service abuse, microsoft office 365, python malware, quick assist, remote machine management, security operations, stac5143, stac5777, teams, threat research

Credit to Author: gallagherseanm| Date: Tue, 21 Jan 2025 11:30:14 +0000

Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware.

Independent Krebs Security

Tricky Phish Angles for Persistence, Not Passwords

January 7, 2020 0 Comments jeff jones, Latest Warnings, login.microsoftonline.com, michael tyler, microsoft office 365, microsoftonline.com, phishlabs, The Coming Storm, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Tue, 07 Jan 2020 21:35:40 +0000

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file storage service. Anyone who takes the bait will inadvertently forward a digital token to the attackers that gives them indefinite access to the victim’s email, files and contacts — even after the victim has changed their password.