Rackspace suffers from security incident involving Hosted Exchange services
Cloud computing services company Rackspace has reported a security incident involving Hosted Exchange services.
Messaging Security
Researchers warn shoppers to beware of Black Friday hacker scams
Researchers from Check Point Research are warning shoppers to beware of Black Friday hacker “holiday special” scams.
Cyber threat actors exploit Zimbra Collaboration Suite vulnerabilities (update)
The Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing & Analysis Center (MS-ISAC) have published a joint security alert for multiple vulnerabilities against Zimbra Collaboration Suite (ZCS).
Microsoft November 2022 Security Updates addresses 65 vulnerabilities (6 zero-days to include ProxyNotShell)
The Microsoft November 2022 Security Updates includes patches and advisories for 65 vulnerabilities, including 6 zero-days and 10 Critical severity issues.
Microsoft disables Basic authentication in Exchange Online to fight password spray attacks
Microsoft has disabled Basic authentication in Exchange Online tenants to help fight against password spray attacks. Attackers are stepping up attacks in anticipation, Microsoft warns.
Microsoft update for Microsoft Exchange Server zero-day ProxyNotShell vulnerabilities
Microsoft has released a new security update for two Microsoft Exchange Server zero-day vulnerabilities (CVE-2022-41040 and CVE-2022-41082) dubbed “ProxyNotShell” under limited targeted attacks in the wild.
Threat actor deploys malicious OAuth apps on compromised cloud tenants to spread spam
Microsoft has been monitoring a threat actor deploying malicious OAuth apps on compromised cloud tenants to spread spam.
Zoom patches XMPP vulnerability chain that could allow an attacker to compromise user over Zoom chat
Zoom recommends users upgrade their Zoom client to version 5.10.0 to fix an XMPP vulnerability chain that could enable an attacker to execute remote code and compromise another user over Zoom chat.
NIST SP 800-47 Rev. 1: Managing the Security of Information Exchanges
The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-47 Rev. 1 Managing the Security of Information Exchanges.
Justice Department seizes domains used in Nobelium spear-phishing attacks
The U.S. Justice Department has announced the seizure of domains used in Nobelium spear-phishing attacks previously identified by Microsoft last week.