Rabia Noureen

Microsoft has fixed a critical vulnerability that could let hackers gain unauthorized access to sensitive data and cross-tenant applications managed by Azure AD. The fix comes shortly after security researchers criticized Microsoft for its “grossly irresponsible” cybersecurity practices. In a post on LinkedIn, Amit Yoran, the CEO of the security firm Tenable, called out Microsoft…

By default, Microsoft Outlook prevents users from sending emails with attachments larger than 20 MB. This means that users may receive an error message while attaching files that exceed the allowed limit. In this guide, I will detail different methods to increase the Outlook attachment size limit. How to increase the Outlook Attachment Size Limit…

The Cybersecurity and Infrastructure Security Agency (CISA) has warned about two vulnerabilities in Ivanti’s Endpoint Manager Mobile (EPMM). The security flaws allowed threat actors to compromise 12 Norwegian government agencies. Ivanti’s Endpoint Manager Mobile is a solution that lets IT admins secure and manage mobile devices in enterprise environments. They can enforce policies, deploy applications,…

Microsoft is getting ready to introduce support for the Microsoft Azure Attestation (MAA) service on Windows 11. The company announced yesterday that the feature will begin rolling out to all commercial customers in mid-August. Currently, Windows 11 and Windows 10 use the Windows Device Health Attestation (DHA) service for client device attestation. The configuration service…

Microsoft is making some minor changes to its cloud licensing policies for specific customers that run Microsoft Office on AWS. This move comes a week after the European Commission opened an antitrust investigation of Microsoft Teams bundling with Office 365/Microsoft 365 subscriptions. In 2019, Microsoft announced new licensing terms that made it more expensive to…

Microsoft has issued a security advisory about a new Russia-linked hacking group dubbed Midnight Blizzard. The threat actors used Microsoft Teams chat to launch social engineering campaigns (which started in late May) that affected dozens of organizations. According to the Microsoft threat intelligence team, the hackers (known as APT29) pretend to be technical support staff…

Microsoft is planning to sunset its Microsoft Managed Desktop service next year. The company has quietly updated its support document to indicate that the service will be deprecated on July 31, 2024. Microsoft Managed Desktop (MMD) is a cloud-based device management service that includes Windows 10/11 Enterprise and Microsoft Office apps. It provides a simplified…

Microsoft announced yesterday that it will soon deprecate Transport Layer Security (TLS) versions 1.0 and 1.1 on Windows 11. The company plans to drop support for the encryption protocols by default on the latest Windows 11 Insider Preview Builds in September. TLS is a cryptographic protocol that’s designed to provide communication security over a computer…

Microsoft has released updates to fix a bug that was previously impacting the Windows Server Update Services (also known as WSUS). The company detailed on the Windows Health Dashboard that the issue prevented the distribution of updates to client devices running Windows 11 version 22H2 as well as Windows Server 2022. Windows Server Update Services…

Earlier this year, Microsoft released watermarking support in public preview for Azure Virtual Desktop (AVD). The company detailed in a blog post yesterday that the security feature is now generally available for all commercial customers. Azure Virtual Desktop (AVD) is a cloud-based virtual desktop and application virtualization solution that runs in Microsoft Azure. The managed…

Microsoft announced yesterday a new update for its Microsoft Entra ID Protection service. This release brings a new dashboard, advanced detection capabilities, integration with Microsoft 365 Defender, and more. The Microsoft Entra ID Protection service leverages machine learning to detect, investigate, and remediate identity-based sign-in risks and unusual activities. It uses risk-based adaptive access policies…

Amazon Web Services (AWS) is planning to charge organizations for the use of public IPv4 addresses. Starting on February 1, 2024, AWS customers will need to pay $0.005 per IP address per hour for all public IPv4 addresses. According to AWS, the cost of purchasing a single IPv4 address increased by over 300 percent during…