Rabia Noureen

Cyber adversaries are evolving into enterprising operators, blending stealth, speed, and AI-driven tactics to outpace traditional defenses. The CrowdStrike 2025 Threat Hunting Report exposes how these sophisticated actors exploit cloud environments, identities, and generative AI to launch cross-domain attacks. According to CrowdStrike, cybersecurity experts observed a sharp rise in sophisticated attacks, with interactive intrusions increasing…

For years, Microsoft has promoted passwordless authentication, urging Windows users to embrace secure options like Windows Hello. But new research suggests that the business version of Windows Hello may have a vulnerability, which leaves it open to sophisticated spoofing attacks. At the Black Hat conference in Las Vegas (via The Register), German researchers Tillmann Osswald…

Microsoft has issued an advisory warning customers of a critical security flaw in Exchange Server hybrid deployments. The vulnerability could allow attackers to escalate privileges within cloud environments, without triggering any alerts or leaving behind detectable traces. An Exchange hybrid configuration is a setup that connects an on-premises Microsoft Exchange Server with Exchange Online in…

Microsoft has launched the Phishing Triage Agent in public preview, seamlessly integrated into Microsoft Defender as part of its expansive Security Copilot initiative. Designed to automate and speed up the analysis of user-reported phishing emails, the agent aims to reduce response times and lighten the load on security teams. The launch of Microsoft’s new Phishing…

Cybersecurity experts have disclosed a critical vulnerability in Broadcom chips found in over 100 Dell computer models, putting millions of users at risk. These flaws could enable hackers to hijack devices, steal passwords, and access sensitive data. According to Cisco Talos researchers, the five security vulnerabilities (tracked as CVE-2025-24311, CVE-2025-25215, CVE-2025-24922, CVE-2025-25050, CVE-2025-24919) affect more…

Overburdened cybersecurity experts are struggling to manage a variety of tools from multiple vendors, sacrificing efficiency, visibility, and budget in the process. New research from Kaspersky shows a growing shift, as more organizations turn to consolidation and automation to simplify operations and regain control. Kaspersky’s research found that around 72 percent of organizations use multi-vendor…

Microsoft has rolled out cross-cloud synchronization in public preview for Entra customers. This new feature simplifies user lifecycle operations across multiple Microsoft cloud environments, enhancing consistency, security, and administrative efficiency. This cross-cloud synchronization feature allows administrators to automatically manage user identities (such as creating, updating, or deleting accounts) across different Microsoft cloud environments. It helps…

Microsoft is giving IT admins more freedom in hybrid environments with the new Group Source of Authority (SOA) feature in Entra ID, now in public preview. This new capability allows organizations to transfer group management from on-premises Active Directory Domain Services (AD DS) to the cloud. In a hybrid identity setup, when administrators sync groups…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched Thorium, a new open-source malware analysis platform. Thorium is designed to streamline threat investigations, and it unifies a wide array of tools into one customizable, scalable system to help security teams analyze malware faster and more efficiently. The problem with traditional malware analysis Security teams…

Microsoft is enhancing security and transparency in Teams meetings with new audit logging capabilities for screen sharing and control actions, such as Take, Give, and Request control. These new logs give IT admins deeper visibility into user behavior, which helps them detect suspicious activity and maintain compliance more effectively. Audit logs in Microsoft Teams are…

Microsoft has rolled out a new streamlined migration experience to help Azure Arc customers simplify and speed up SQL Server migrations. This capability, which is available in preview, is powered by Azure Database Migration Service. According to Microsoft, this new experience introduces end-to-end migration capabilities in SQL Server enabled by Azure Arc. These include simplified…

Security agencies have issued an advisory about a hacking group that is infiltrating Microsoft Teams and Slack to gather intelligence and launch phishing attacks on employees. The FBI and other cybersecurity agencies have warned that the Scattered Spider hacking group is leveraging ransomware and social engineering techniques to target victims. According to the joint advisory,…