Microsoft Confirms Chinese State-Backed Atlassian Confluence Attacks

Microsoft has revealed that a Chinese-backed threat group, known as Storm-0062, is currently exploiting a critical zero-day vulnerability in Atlassian Confluence Server and Confluence Data Center. The proof-of-concept exploits for this vulnerability are now publicly available, raising the alarming possibility of mass exploitation. Last week, Atlassian acknowledged the remotely exploitable privilege-escalation vulnerability (CVE-2023-22515) that affects…

The post Microsoft Confirms Chinese State-Backed Atlassian Confluence Attacks appeared first on Petri IT Knowledgebase.

Continue reading Microsoft Confirms Chinese State-Backed Atlassian Confluence Attacks

Microsoft Defender for Endpoint Now Automatically Blocks Human-Operated Attacks

Microsoft Defender for Endpoint is getting a security feature designed to thwart human-operated attacks automatically. The introduction of new “contain user disruption” capabilities empowers organizations to swiftly isolate compromised user accounts and put a stop to lateral movement during hands-on keyboard attacks. Microsoft Defender for Endpoint is a security solution that enables customers to detect,…

The post Microsoft Defender for Endpoint Now Automatically Blocks Human-Operated Attacks appeared first on Petri IT Knowledgebase.

Continue reading Microsoft Defender for Endpoint Now Automatically Blocks Human-Operated Attacks

Microsoft to Disable NTLM Authentication in Windows 11

Microsoft is getting ready to say goodbye to NT LAN Manager (NTLM), a long-standing authentication support system, in favor of the more robust and secure Kerberos protocol. This transition is also bringing two new fallback mechanisms into play, aimed at addressing existing limitations within the protocol. What is NTLM? NT LAN Manager (NTLM) is a…

The post Microsoft to Disable NTLM Authentication in Windows 11 appeared first on Petri IT Knowledgebase.

Continue reading Microsoft to Disable NTLM Authentication in Windows 11

Microsoft Plans to Deprecate VBScript in Windows to Block Malware

VBScript, once the go-to tool for Windows enthusiasts and IT professionals, is gradually inching towards its sunset. Microsoft has quietly updated its list of deprecated features to indicate that it’s planning to completely remove the scripting language in future versions of Windows. VBScript (also called Visual Basic Scripting Edition) is a scripting language that allows…

The post Microsoft Plans to Deprecate VBScript in Windows to Block Malware appeared first on Petri IT Knowledgebase.

Continue reading Microsoft Plans to Deprecate VBScript in Windows to Block Malware

Microsoft’s October 2023 Patch Tuesday Updates Fix 103 Security Flaws

Microsoft announced the release of the October 2023 Patch Tuesday updates for Windows 10 and Windows 11 yesterday. This month, the company has addressed 103 security vulnerabilities, including three actively exploited zero-day flaws affecting Microsoft WordPad, Skype for Business, and the HTTP/2 protocol. October 2023 Patch Tuesday updates fix over 100 vulnerabilities In October, Microsoft…

The post Microsoft’s October 2023 Patch Tuesday Updates Fix 103 Security Flaws appeared first on Petri IT Knowledgebase.

Continue reading Microsoft’s October 2023 Patch Tuesday Updates Fix 103 Security Flaws

Microsoft Introduces New Search & Intelligence Admin Portal Experience

Microsoft has started rolling out a new home page for its Search and intelligence admin portal. The new homepage provides a centralized hub to help enterprise customers access all search capabilities, including user feedback and Graph connectors. Microsoft Search is a unified search experience that allows enterprise customers to search across Microsoft 365 apps and…

The post Microsoft Introduces New Search & Intelligence Admin Portal Experience appeared first on Petri IT Knowledgebase.

Continue reading Microsoft Introduces New Search & Intelligence Admin Portal Experience

Microsoft 365 Admins Warned About Google’s New Strict Anti-Spam Rules

Last week, Google made headlines with its announcement of new requirements for bulk email senders, signalling a renewed commitment to safeguarding Gmail users from the deluge of unwanted emails. In a similar vein, Microsoft has now chimed in, urging administrators to authenticate outbound messages to ensure continuous email delivery. Google explained that the new policies…

The post Microsoft 365 Admins Warned About Google’s New Strict Anti-Spam Rules appeared first on Petri IT Knowledgebase.

Continue reading Microsoft 365 Admins Warned About Google’s New Strict Anti-Spam Rules

Azure Arc-Enabled System Center Virtual Machine Manager Gets New Management Features

Microsoft has released new Azure management capabilities tailored for Azure Arc-enabled System Center Virtual Machine Manager (SCVMM). This latest update enables customers to oversee their virtualized workloads operating on-premises or cloud environments. Azure Arc-enabled System Center Virtual Machine Manager (SCVMM) is a solution that allows organizations to manage virtualized workloads running on on-premises or cloud…

The post Azure Arc-Enabled System Center Virtual Machine Manager Gets New Management Features appeared first on Petri IT Knowledgebase.

Continue reading Azure Arc-Enabled System Center Virtual Machine Manager Gets New Management Features

Windows Server Insider Build 25951 Adds New AD Forest and Domain Functional Level

Microsoft has recently announced the release of the Windows Server Insider Preview build 25951. The new build introduces several enhancements for Active Directory Domain Services (AD DS) and Active Directory Lightweight Domain Services (AD LDS), including support for a new forest and domain functional level. What are Active Directory functional levels? Functional levels are controls…

The post Windows Server Insider Build 25951 Adds New AD Forest and Domain Functional Level appeared first on Petri IT Knowledgebase.

Continue reading Windows Server Insider Build 25951 Adds New AD Forest and Domain Functional Level

Microsoft Cloud for Sovereignty Launches in Public Preview

Microsoft has announced the public preview of its Microsoft Cloud for Sovereignty solution tailored specifically for the public sector. The new offering marks a significant step towards empowering government entities to navigate the complex landscape of data compliance and security requirements with confidence. Microsoft first unveiled Cloud for Sovereignty at its annual Inspire partner conference…

The post Microsoft Cloud for Sovereignty Launches in Public Preview appeared first on Petri IT Knowledgebase.

Continue reading Microsoft Cloud for Sovereignty Launches in Public Preview