Rabia Noureen

Microsoft has announced its plans to launch Office 365 Government Secret, a new cloud offering for government agencies and their partners. The company says that this new security offering is currently in government review, and it’s expected to become generally available in mid-2022. Microsoft highlighted that the Office 365 Government Secret cloud service is built…

Security researchers have uncovered five critical vulnerabilities in Microsoft Azure Defender for IoT. The Redmond giant has already released new security patches to address these exploits, and it recommends all enterprise customers to install them as soon as possible. According to a report from SentinelOne‘s SentinelLabs, these security vulnerabilities were first discovered by researchers Kasif…

Microsoft has released a new security feature that should help to protect Windows PCs against malicious drivers. David Weston, Microsoft’s Vice President of Enterprise and OS Security, announced on Twitter today that the vulnerable driver blocklist feature is now available on Windows 10, Windows 11, as well as Server 2016 and higher. The new vulnerable…

Sophos has released an emergency update to patch a critical security flaw in its firewall product line. The company explained in its security advisory that the vulnerability, tracked under CVE-2022-1040, when exploited could allow for remote code execution (RCE) on targeted machines. According to Sophos, this remote code execution vulnerability was first discovered by an…

Microsoft is rolling out a new update that lets IT Admins configure a tenant-wide timeout policy to automatically sign out inactive users in Microsoft 365 web apps. This new Idle Session Timeout feature is currently available in preview, and it should help to protect user data from unauthorized access on unmanaged devices or shared devices….

Microsoft announced a major revamp of its partner program last week. The Redmond giant will rebrand the existing Microsoft Partner Network (MPN) to Microsoft Cloud Partner Program (MCPP) on October 3. This will be the first biggest overhaul since Microsoft launched its partner program over a decade ago, and the impact could be significant for…

Microsoft has released the optional March 2022 non-security patch (KB5011543) for Windows 10 versions 21H2, 21H1, and 20H2. This optional update addresses a serious Bluetooth issue that was previously causing blue screens of death (BSODs) on Windows 10 machines. This Bluetooth bug was first discovered following the release of the optional KB5009596 patch in January,…

Okta, an enterprise identity and access management company, has published an extensive update about the recent cyberattack by the LapsuS$ hacking group. The company confirmed that around 2.5 percent of its customers were affected by this security incident. The investigations revealed that the threat actors managed to gain access to the laptop of a third-party…

Microsoft has been doing some significant work to make its Teams app more reliable and less susceptible to being hit by outages. These investments complement ongoing efforts to make Microsoft Teams more battery-efficient when users are in video meetings. First of all, Microsoft wants to improve the resiliency of the app and make it as…

Microsoft has announced a new integration between the Jira project management tool and its Teams collaboration service. The goal is to make it easier for users to track, update and manage their projects directly within Microsoft Teams. The new Jira Cloud app lets users convert their chat messages into a new Jira issue or add…

Microsoft has confirmed that the hacking group Lapsus$ managed to gain “limited access” to its security system and steal some parts of their source code. The company says that its security researchers had already been tracking the activities of Lapsus$, which claims to have hacked sensitive data from Samsung, Nvidia, Ubisoft, and Okta. The Redmond…

HP has acknowledged that its several printer models are vulnerable to a new critical buffer overflow bug that can potentially lead to remote code execution (RCE). This latest security flaw is being tracked under CVE-2022-3942, and it was first discovered by Trend Micro’s Zero Day Initiative team. As noted in a post by Bleeping Computer,…