Day

November 20, 2024
Microsoft has exposed a new wave of sophisticated password spray attacks led by the Chinese state-sponsored threat actor, Storm-0940, which leverages a botnet called CovertNetwork-1658—also known as Quad7 or xlogin. This botnet infrastructure, comprising thousands of compromised SOHO (Small Office/Home Office) routers, enables highly evasive cyberattacks against Microsoft 365 accounts across sectors in North America and...
Read More
Microsoft recently announced the general availability of Inbound SMTP DANE with DNSSEC for Exchange Online customers, aiming to enhance email security and prevent sophisticated attacks. This move integrates two advanced security standards: SMTP DANE (DNS-based Authentication of Named Entities) and DNSSEC (Domain Name System Security Extensions), creating a robust barrier against email-based threats. Background and Rollout Details...
Read More