Deep Diive Solutions, LLC - IT/Computer Support

Squirrelwaffle, Microsoft Exchange Server vulnerabilities exploited for financial fraud

Squirrelwaffle, Microsoft Exchange Server vulnerabilities exploited for financial fraud | ZDNet Unpatched servers have been used to twist corporate email threads and conduct financial theft.

Microsoft warned admins today to immediately patch a high severity Exchange Server vulnerability that may allow authenticated attackers to execute code remotely on vulnerable servers.

Microsoft urges Exchange admins to patch bug exploited in the wild Microsoft warned admins today to immediately patch a high severity Exchange Server vulnerability that may allow authenticated attackers to execute code remotely on vulnerable servers.

darkreading.com: Microsoft Fixes Exchange Server Zero-Day.
https://www.darkreading.com/vulnerabilities-threats/microsoft-s-nov-security-update-contains-fix-for-exchange-server-0-day

Microsoft Fixes Exchange Server Zero-Day November security update contains patches for 55 bugs — including six zero-days across various products.

Microsoft accounts can go passwordless, making “password123” a thing of the past

Microsoft accounts can go passwordless, making “password123” a thing of the past Passwordless accounts rely on MS Authenticator or a security key for login.

Well worth the look...https://www.sonicwall.com/medialibrary/en/infographic/2021-mid-year-update-sonicwall-cyber-threat-report.pdf

Please patch your Exchange! 😳
New Microsoft Exchange 'ProxyToken' Flaw Lets Attackers Reconfigure Mailboxes

New Microsoft Exchange 'ProxyToken' Flaw Lets Attackers Reconfigure Mailboxes ProxyToken, a new vulnerability (CVE-2021-33766) in Microsoft Exchange allows hackers to modify server configurations and steal users' emails.

😬
Microsoft sinks standalone Hyper-V Server, wants you using Azure Stack HCI for VM-wrangling

Microsoft sinks standalone Hyper-V Server, wants you using Azure Stack HCI for VM-wrangling Yet again, Microsoft tries to make your world more Azure-centric

Only 34? 🙄
Windows 10 KB5005101 Cumulative Update released with 34 fixes

Windows 10 KB5005101 Cumulative Update released with 34 fixes Microsoft has released the optional KB5005101 Preview cumulative update for Windows 10 2004, Windows 10 20H2, and Windows 10 21H1 with fixes for thirty-four issues.

Microsoft Releases Windows Updates to Patch Actively Exploited Vulnerability
August 10, 2021

Microsoft Releases Windows Updates to Patch Actively Exploited Vulnerability Microsoft has rolled out security updates to address a total of 44 security vulnerabilities, one of which it says is an actively exploited zero-day.

Upcoming changes to Google Drive sync clients
Drive File Stream is now called Google Drive for desktop.
More info here:

Upcoming changes to Google Drive sync clients - Google Workspace Admin Help Drive File Stream is now called Google Drive for desktop. Later this year, we will unify our sync clients and bring features from Backup and Sync to Google Drive for desktop to create a better user ex

5 Ways to Stop Ransomware in its Tracks - 9 AUG 2021

5 Ways to Stop Ransomware in its Tracks There are several key measures organizations can take to stop ransomware attacks in their tracks

NIST Requests Information to Help Develop an AI Risk Management Framework

NIST Requests Information to Help Develop an AI Risk Management Framework As a key step in its effort to manage the risks posed by artificial intelligence (AI), the U.S.