On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises,... 2022-4-5 15:0:0 | 阅读: 3 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com premises security exchange eligible

Randomizing the KUSER_SHARED_DATA Structure on Windows Windows 10 made a lot of improvements in Kernel Address Space Layout Randomization (KASLR) tha... 2022-4-5 15:0:0 | 阅读: 5 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com windows kuser randomized mapped remote

Increasing Representation of Women in Security Research Microsoft is committed to partnering with and supporting women in security research. Whether i... 2022-3-31 15:0:0 | 阅读: 4 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com security easterly 2030 partnering

Randomizing the KUSER_SHARED_DATA Structure on Windows This blog post is older than a year. The information provided below may be outdated.... 2022-3-30 15:0:0 | 阅读: 6 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com randomizing kuser windows microsoft security

Exploring a New Class of Kernel Exploit Primitive The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSR... 2022-3-22 15:0:0 | 阅读: 27 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com acpi mmio mcfg memory windows

Guidance for CVE-2022-23278 spoofing in Microsoft Defender for Endpoint Microsoft released a security update to address CVE-2022-23278 in Microsoft Defender for Endpo... 2022-3-8 16:0:0 | 阅读: 6 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com windows microsoft security defender client

Disclosure of Vulnerability in Azure Automation Managed Identity Tokens On December 10, 2021, Microsoft mitigated a vulnerability in the Azure Automation service. Azu... 2022-3-7 16:0:0 | 阅读: 7 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com microsoft security identities orca mitigated

Cyber threat activity in Ukraine: analysis and resources UPDATE 27 Apr 2022: See Updated malware details and Microsoft security product detections belo... 2022-2-28 16:0:0 | 阅读: 18 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com microsoft ukraine security destructive defender

Researcher Spotlight: Cyber Viking Nate Warfield is Here to Help “There are few jobs where I can say, I make two billion people more secure on the internet eve... 2022-2-11 16:0:0 | 阅读: 9 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com warfield him security league mission

Expanding the Microsoft Researcher Recognition Program The Microsoft Researcher Recognition Program offers public thanks and recognition to security... 2022-2-1 16:0:0 | 阅读: 4 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com leaderboard security recognize microsoft badges

Congratulations to the Top MSRC 2021 Q4 Security Researchers! Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recog... 2022-2-1 16:0:0 | 阅读: 7 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com leaderboard security quarter q4

An Armful of CHERIs Today, Arm announced that the first silicon supporting the Morello prototype architectu... 2022-1-20 16:0:0 | 阅读: 13 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com cheri memory software security morello

Coming Soon: New Security Update Guide Notification System Sharing information through the Security Update Guide is an important part of our ongoing eff... 2022-1-11 16:0:0 | 阅读: 9 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com security revisions phases cves incremented

Azure App Service Linux source repository exposure MSRC was informed by Wiz.io, a cloud security vendor, under Coordinated Vulnerability Disclosu... 2021-12-22 16:0:0 | 阅读: 8 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com php microsoft deployments repository notified

Researcher Spotlight: Dr. Nestori Syynimaa’s Constant Mission Protecting Identities “When you find the things I find, they really matter. They affect everybody’s security.”... 2021-12-14 16:0:0 | 阅读: 7 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com nestori him security cloud finland

Microsoft’s Response to CVE-2021-44228 Apache Log4j 2 Published on: 2021 Dec 11, updated 2022 Apr 6. SUMMARY SUMMARY Micr... 2021-12-12 16:0:0 | 阅读: 29 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com log4j microsoft security cosmos

Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs Microsoft recently mitigated an information disclosure issue, CVE-2021-42306, to prevent priva... 2021-11-17 16:0:0 | 阅读: 7 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com microsoft migrate appliances security

BlueHat is Back! After a short hiatus, BlueHat is coming back with a vengeance! And we’ve got big plans for the... 2021-11-11 16:0:0 | 阅读: 4 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com bluehat engage partly hear

We’re Excited to Announce the Launch of Comms Hub! We are excited to announce the launch of Comms Hub to the Researcher Portal submission experie... 2021-10-25 15:0:0 | 阅读: 4 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com comms spm security submission glimmer

New High Impact Scenarios and Awards for the Azure Bounty Program Microsoft is excited to announce new Azure Bounty Program awards up to $60,000 to encourage an... 2021-10-18 15:0:0 | 阅读: 5 | 收藏 | Microsoft Security Response Center - msrc.microsoft.com awards security microsoft eligible reward