Author: Rafael Silva

Written by Rafael Silva

Windows Lock Screen Security Feature Bypass Vulnerability (Important, CVE-2020-17099, CVSSv3 6.8/5.9)

Windows Lock Screen Security Feature Bypass Vulnerability (Important, CVE-2020-17099, CVSSv3 6.8/5.9) https://ift.tt/36VPxzp Yesterday, for its December 2020 Patch Tuesday, Microsoft released an important security update addressing a Windows Lock Screen Security Feature Bypass Vulnerability .   About the vulnerability An authenticated user has signed into a device and locks his or her active session. An […]

Written by Rafael Silva

FireEye and partners release SolarWinds kill-switch

FireEye and partners release SolarWinds kill-switch https://ift.tt/3airWLc FireEye and partners GoDaddy and Microsoft have deployed a so-called kill-switch against the SolarWinds Sunburst/Solarigate malware used by a state-backed actor to compromise multiple US government departments and FireEye, mitigating some of the potential impact of the wide-ranging attack. The cyber attack saw the compromise of SolarWinds’ network […]

Written by Rafael Silva

Last night I was playing with Azure Image Builder. Well, here is a scenario that will create 20H2 WVD Image (with teams, fslogix, onedrive and optimizations) @PieterWigleven https://t.co/7CDMkT77YK. In this case #WSLab is not needed as all is in Azure :) https://t.co/IpimW1H6Zk

Last night I was playing with Azure Image Builder. Well, here is a scenario that will create 20H2 WVD Image (with teams, fslogix, onedrive and optimizations) @PieterWigleven https://t.co/7CDMkT77YK. In this case #WSLab is not needed as all is in Azure 🙂 https://t.co/IpimW1H6Zk from jaromirkaspar twit http://twitter.com/jaromirkaspar/status/1337465252133343233

Written by Rafael Silva

Spoofing Vulnerability in DNS Resolver (SAD DNS, Important, CVE-2020-25705, ADV200013)

Spoofing Vulnerability in DNS Resolver (SAD DNS, Important, CVE-2020-25705, ADV200013) https://ift.tt/3oI5kYr On December 8th, 2020, Microsoft issued an advisory for a spoofing vulnerability in the DNS Resolver component. Microsoft refers to the advisory as ADV200013. BleepingComputer.com references CVE-2020-25705 in relationship to this vulnerability. In the advisory notice, Microsoft guides DNS admins to limit the DNS […]

Written by Rafael Silva

Azure Storage account recovery available via portal is now generally available

Azure Storage account recovery available via portal is now generally available https://ift.tt/2LqxYiF Azure Storage uses a storage account to contain all of your Azure Storage data including: blobs, files,  tables, queues, and disks.  Accidentally deleting a storage account deletes all data in the account and previously could not be recovered.  Today we are announcing that storage account recovery is available with some restrictions and this functionality is available […]

Written by Rafael Silva

Theft of Cybersecurity Tools | FireEye Breach

Theft of Cybersecurity Tools | FireEye Breach https://ift.tt/2W0S6ty On December 8, 2020, FireEye disclosed theft of their Red Team assessment tools. These tools are used by FireEye to test and validate the security posture of their customers. According to FireEye, the hackers now have an influential collection of new techniques to draw upon. It is unclear today if the attackers intend to use the tools themselves or if […]