Microsoft holes and products dying

posted by Roy Schestowitz on Sep 13, 2023

• Microsoft fixes two zero-days, 59 other flaws on Patch Tuesday

  The flaw was discovered by the Microsoft Threat Intelligence team.

  {loadposition sam08}"Exploitation of this vulnerability is not just limited to a potential target opening a malicious Word document, as simply previewing the file can cause the exploit to trigger," Narang said.

  "Exploitation would allow for the disclosure of New Technology LAN Manager (NTLM) hashes.

  "This is the second zero-day vulnerability in Microsoft products in 2023 that has resulted in the disclosure of NTLM hashes.

• W3LL phishing kit hijacks thousands of Microsoft 365 accounts, bypasses MFA

  A threat actor known as W3LL developed a phishing kit that can bypass multi-factor authentication along with other tools that compromised more than 8,000 Microsoft 365 corporate accounts.

  >

• Microsoft is killing the Surface Duo after just 3 years

  It’s been three years since the original Microsoft Surface Duo was released, giving us the first taste of a Microsoft-made foldable tablet.