Phishing and suspicious behavior in Outlook - Microsoft Support
Here are some ways to deal with phishing and spoofing scams in Outlook.com. Spoof Intelligence from Microsoft 365 Advanced Threat Protection and Exchange Online Protection help prevent phishing messages from reaching your Outlook inbox.
National Public Data breach: What you need to know
This breach allegedly exposed up to 2.9 billion records with highly sensitive personal data of up to 170M people in the US, UK, and Canada (Bloomberg Law). This article provides detailed information about the breach, the data exposed, and recommended actions to help you stay safe.
Protect yourself from phishing - Microsoft Support
Phishing (pronounced: fishing) is an attack that attempts to steal your money, or your identity, by getting you to reveal personal information -- such as credit card numbers, bank information, or passwords -- on websites that pretend to be legitimate.
KB4457951: Windows guidance to protect against speculative …
2019年5月14日 · Microsoft is aware of new variants of the class of attack known as speculative execution side-channel vulnerabilities. The variants are named L1 Terminal Fault (L1TF) and Microarchitectural Data Sampling (MDS). An attacker who can successfully exploit L1TF or MDS may be able to read privileged data across trust boundaries.
KB5029778: How to manage the vulnerability associated with CVE …
2023年9月12日 · Microsoft is aware of a new transient execution attack named gather data sampling (GDS) or "Downfall." This vulnerability could be used to infer data from affected CPUs across security boundaries such as user-kernel, processes, virtual machines (VMs), and trusted execution environments.
How to recover a hacked or compromised Microsoft account
Learn how to remove viruses or malware from your Windows PC. Learn how to recover a hacked or compromised account, what to do next, and how to prevent your account from being compromised in the future.
How to spot a "fake order" scam - Microsoft Support
How to spot a "fake order" scam. A popular tactic of criminals is the "fake order" scam. The way it works is that you get a message, usually in email or text, that appears to be a routine confirmation for an order. Of course, you never ordered whatever product or service it's confirming. The message looks common enough, and it says that money ...
EMET mitigations guidelines - Microsoft Support
The Enhanced Mitigation Experience Toolkit (EMET) is a utility that helps prevent vulnerabilities in software from being successfully exploited. EMET achieves this goal by using security mitigation technologies.
KB5042562: Guidance for blocking rollback of Virtualization-based ...
2024年8月13日 · Rollback of these binaries might allow an attacker to circumvent VBS security features and exfiltrate data that is protected by VBS. This issue is described in CVE-2024-21302 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability.
KB5028407: How to manage the vulnerability associated with CVE …
2023年8月8日 · Successful exploitation of this vulnerability requires an attacker to coordinate the attack with another privileged process that is run by another user in the system. For more information about this vulnerability, see CVE-2023-32019 | Windows Kernel Information Disclosure Vulnerability.
KB5005413: Mitigating NTLM Relay Attacks on Active Directory ...
Summary. Microsoft is aware of PetitPotam which can potentially be used to attack Windows domain controllers or other Windows servers. PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect customers. For example: Microsoft Security Advisory 974926.