NatJack Attacks Exploit NAT Table Flaws to Hijack TCP Sessions and Spoof DNS
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack…
Tag: Microsoft
NatJack Attacks Exploit NAT State to Hijack TCP Sessions and Spoof DNS
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that exploits network address translation (NAT) connection state to hijack…
AI Recommendation Poisoning: How ‘Ask AI’ Buttons Silently Alter LLM Memory
A new class of prompt injection attack, dubbed "AI Recommendation Poisoning," is spreading across commercial websites. It exploits pre-filled deep links in…
Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
Microsoft Threat Intelligence has uncovered a macOS ClickFix operation that uses more than 250 front-end domains to distribute malware, including MacSync and…
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
A cluster of 77 malicious extensions on the Open VSX marketplace has been discovered impersonating legitimate developer tools while exfiltrating sensitive information…
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has expanded its capabilities to include device code phishing, a technique that abuses the…
Fake Adobe and Zoom Updates Deliver ScreenConnect for Persistent Remote Access
Cybersecurity researchers have uncovered an active, multi-wave campaign that uses social engineering lures themed around Adobe and Zoom updates, business document reviews,…
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
The Police National Legal Database (PNLD) has confirmed a data breach that exposed contact details of U.K. police officers, government partners, and…
Power Pages: Secure Configuration Essential
Power Pages is a Microsoft product for creating public-facing websites. Misconfigurations, such as granting Anonymous Users access to Dataverse tables, can expose…
Dataverse: Data Storage and Security
Dataverse is a data storage and management platform within Microsoft Power Platform. It stores tables that can be accessed via Power Pages.…