An attacker could exploit this vulnerability to take control of an affected system. Applying patches from Microsoft’s October 2020 Security Advisory for CVE-2020-16952 can prevent exploitation of this vulnerability. Keep Reading
Microsoft has released security updates to address remote code execution vulnerabilities affecting Windows Codecs Library and Visual Studio Code. An attacker could exploit these vulnerabilities to take control of an affected system. Keep Reading
New subsidiary Intact Defense will spearhead and facilitate the delivery of its 100% Microsoft cloud technology solutions to the Federal Government and Department of Defense. Keep Reading
ForgeRock announced it joined the Microsoft Intelligent Security Association (MISA), an ecosystem of independent software vendors that have integrated their solutions to better defend against a world of increasing threats. Keep Reading
An unauthenticated attacker with network access to a domain controller could exploit this vulnerability to compromise all Active Directory identity services. Keep Reading
Abnormal’s data science approach allows customers to deploy behavioral AI to stop sophisticated phishing, fraud and social engineering cyberattacks. Keep Reading
However, the US Defense Department (DoD) said that “contract performance” by Microsoft (MSFT) will not start immediately due to the preliminary injunction order issued by the Court of Federal Claims on February 13. Keep Reading
It is committed to acquiring TikTok subject to a complete security review and providing proper economic benefits to the United States, including the United States Treasury. Keep Reading
Meant as an important security update, KB4556799 is causing everything from the Blue Screen of Death to audio problems and temporary data loss. Keep Reading
As organizations adapt or change their enterprise collaboration capabilities to meet “telework” requirements, many organizations are migrating to Microsoft Office 365 (O365) and other cloud collaboration services. Keep Reading
The Department of Defense's Inspector General released its report Wednesday examining the litany of legal controversies that have dogged the Joint Enterprise Defense Initiative (JEDI) cloud contract since its inception more than two years ago. Keep Reading
The Defense Department urged a federal judge to grant its motion—filed in March— for a 120-day remand to reconsider the evaluation for its Joint Enterprise Defense Infrastructure contract. Keep Reading
The federal judge handling the bid protest lawsuit over DoD’s multibillion dollar JEDI Cloud contract found that the Pentagon treated Amazon Web Services unfairly when it awarded the multibillion dollar contract to Microsoft. Keep Reading
A federal judge Thursday ordered a temporary block on the JEDI cloud contract, which was awarded to Microsoft, in response to a suit filed by Amazon. Shares of Microsoft fell on the news, while Amazon’s stock was down slightly. Keep Reading
The breach, which appears to be an espionage operation, reportedly gave the hackers access to an estimated 400 GB of sensitive data. Keep Reading
DATA PRIVACY DAY: Aura of ambiguity around the new legislation has led to a slow start for enforcement. Keep Reading
The joint status report — filed by the DoD, Microsoft and AWS in the Court of Federal Claims — lays out a timeline for the next few weeks of Amazon’s court challenge. Keep Reading
DHS’s Cybersecurity and Infrastructure Security Agency (CISA) subsequently released an emergency directive on Tuesday afternoon requiring all agencies to implement Microsoft’s patch by Jan. 29. Keep Reading
Among the vulnerabilities patched were critical weaknesses in Windows CryptoAPI and Windows Remote Desktop Protocol (RDP) server and client. An attacker could remotely exploit these vulnerabilities to decrypt, modify, or inject data on user connections. Keep Reading
Microsoft is alleging that two unnamed hackers with alleged ties to North Korea have targeted thousands of university employees, government workers and others. Keep Reading