Questions tagged [microsoft]
The microsoft tag has no usage guidance.
122
questions
0
votes
1
answer
96
views
Threat and risk analysis of Microsoft Teams
I look on all the corporations and firms that have embraced Microsoft Teams in the past and I can not stop wondering if it is a disaster waiting to happen or if I am missing something important. We ...
- 395
0
votes
0
answers
43
views
Microsoft Mouse Without Borders: are data of the first pc private?
I would like to use Microsoft Mouse Without Borders to share the mouse and keyboard of my workstation with my personal tablet (basically, I need an extra monitor to write work notes while I am using ...
- 481
1
vote
0
answers
212
views
Security risks in using ‘no @thankyou.com’ to bypass Microsoft account login when installing Windows 11
One of the recommended methods for bypassing Microsoft account login during the Windows 11 OOBE is to attempt to log in using a locked account (no @thankyou.com being the most commonly recommended ...
- 111
0
votes
0
answers
25
views
Configured KQL not working properly - CiscoISE event 60095 and 60098
I have a default KQL below which is used to detect when Cisco ISE failed backup, it fires an alert in Sentinel.
But it is not working as expected - it does fire an alert, but returning a timestamp ...
- 11
1
vote
1
answer
50
views
What are the risks with PPTP (MS-CHAPV1/V2)?
What are the risks with PPTP (MS-CHAPV1/V2)? Are the only ways that it can be exploited are if someone already has access to the network and can ARP poison etc or capture packets some way? Or can it ...
- 11
0
votes
0
answers
114
views
How to handle KB5025823 X509 changes correctly?
According this change here, .NET Core will handle imports of X509 certificates differently.
Using .NET 6, for the value of System.Security.Cryptography.Pkcs12UnspecifiedPasswordIterationLimit, we ...
- 101
1
vote
0
answers
65
views
How to find out what Microsoft 365 Defender is monitoring?
I am currently analyzing our security landscape with the help of the MITRE ATT&CK Framework. Most techniques have ways to "Mitigate" and to "Detect" it, and one of the most ...
- 11
2
votes
0
answers
85
views
What does a Microsoft Safelink contain?
Regarding the URL query arguments of a Safelink:
Why do they contain my e-mail address (the recipient)?
What are these two longish strings? Look like IDs of a database. Does Microsoft store Safelinks ...
- 221
0
votes
0
answers
121
views
What information does the Microsoft Intelligent Security Graph use for querying files?
I'm looking into WDAC and the option to use Microsoft's ISG for files that are not explicitly allowed or denied caught my interest. Unfortunately I haven't been able to find any information on what is ...
- 11
0
votes
1
answer
86
views
How to make VBA code stay hidden even after vba stomping?
I am experimenting with VBA stomping in microsoft word documents.
I have done it manually but also with the evilClippy tool aswell.
What i have noticed is that, although the original vba code stays ...
- 23
1
vote
2
answers
395
views
How MS Authenticator works
When using MS Authenticator on a Microsoft account, the user fills in the email address or username. After that, the user presses one of the three numbers in the MS authenticator app and is logged in. ...
- 51
1
vote
1
answer
1k
views
Microsoft Purview Sensitivity labels, best practices for setup?
Background
There have been more than a handful of recent security breaches at my company, involving social engineering and spoofed emails.
A malicious actor fraudulently spoofing one of our customers, ...
- 111
2
votes
0
answers
365
views
Why does MS Teams establishing outbound connection towards malicious IP? [closed]
I'm wondering how come an internal "Teams.exe" can make outbound connections to a malicious IP, 132.147.119[.]217 (ISP: ViewQwest Pte Ltd) that was flagged as malicious and also was involved ...
- 21
2
votes
1
answer
362
views
How does microsoftonline.com know which device I am on, and whether it is a registered device?
Most of the webprogramming and IT security I know is from ten years ago. I'm far from being a pro, so please keep my ignorance in mind when answering.
Back then, browsers sometimes sent details about ...
- 131
4
votes
1
answer
112
views
Is it possible to see the previous contents in a word file?
I have a word document where I have turned off the tracking history so technically no one could track my previous changes. What if I send the word document via email? Could someone possibly use a ...
- 41
2
votes
2
answers
214
views
What is the point of the sign-in timeout of Microsoft services?
The sign-in process of Microsoft services has a timeout whereby if you wait too long to input a password, the sign-in dialog expires and you need to refresh the dialog.
For example, this is what ...
- 287
1
vote
0
answers
43
views
How do Microsoft's unmanaged device access controls work?
Microsoft provides several different services that check to see if you are on an untrusted device, even when accessing them from the browser. For example, they can be banned from SharePoint and ...
- 111
4
votes
1
answer
389
views
Why did Microsoft publish the CPassword AES key ca. 2012?
As outlined in Security Bulletin MS14-025, Microsoft acknowledges the way credentials had been stored in the group policy field "CPassword" is insecure and is not to be trusted any more.
...
- 143
0
votes
1
answer
856
views
KB Patches not taking effect for CVE-2022-26832: .NET Framework Denial of Service Vulnerability
Rapid 7 has found CVE-2022-26832 on a server running Windows Server 2012 R2 Standard Edition with a French langauge pack installed.
The following is listed as the proof why Rapid 7 thinks the ...
0
votes
0
answers
461
views
Change default classification label (Azure Information Protection) in Microsoft Office (Outlook, Word, Excel) by user
We have Azure Information Protection (AIP) configured for our organisation, we have 4 labels defined (public, internal, confidential, secret). The default label set for the organization is to "...
- 1
0
votes
1
answer
833
views
TGS Ticket in Kerberoasting
In kerberoasting , User request service ticket for any service with registered SPN then use the ticket to crack service password.
But in kerberoses authentication process , KRB_TGS_REQ request is ...
- 71
0
votes
0
answers
190
views
Microsoft Pluton Security Chip - Specs and API?
Microsoft introduced a new security chip dubbed Pluton that is ought to become mandatory for systems running Windows (11 and forward).
AMD has already implemented or is about to implement the chip as ...
- 191
2
votes
2
answers
5k
views
Microsoft Defender flagged Surfshark.exe as "Misleading:Win32/Lodi"
Can this be safely ignored?
VirusTotal shows that Microsoft is the only security vendor that flagged this file as malicious. I did not modify my Surfshark installation in any way, except for an update ...
0
votes
1
answer
73
views
Can 2k (or in the spirit of the new year, 2k22) bugs be security risks?
Microsoft Exchange was recently affected by an issue involving the way they stored timestamps (overflow). Could this, and similar bugs, be exploited by an attacker?
- 1,326
0
votes
1
answer
354
views
Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]
Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
1
vote
1
answer
164
views
Does .NET Framework have a bounty program?
The Microsoft .NET Bounty Program states that "Vulnerabilities in the .NET Framework, or any ASP.NET framework running on .NET Framework (Webforms or MVC)" is out of scope.
Is .NET Framework ...
- 153
0
votes
1
answer
2k
views
How can a Microsoft "unsuccessful sign-in" trigger a 2FA request?
I was certain I'd find a question asking this, but a search didn't return any results.
I have 2FA enabled on my Microsoft account, which requires me to approve all sign-ins using the Microsoft ...
user218666
1
vote
0
answers
92
views
What is Threat Profile is Microsoft addressing with the MSAL URI format?
Applications built for MSAL 1.0 and MSAL 2.0 have a default application URI of MSAL://GUIDHere/AppName
This is in contrast with what other IDP's are doing.
Can anyone explain the benefits or drawbacks ...
- 50.7k
0
votes
2
answers
198
views
Avoiding having emails being traced
I am writing a novel and the main character sent anonymous emails using Outlook and a VPN on an iPhone to disclose information about the mafia. Now, the police are investigating it. How can he avoid ...
- 1
1
vote
0
answers
1k
views
Is it possible to enumerate Microsoft Access database using sqlmap?
I'm trying to enumerate a Microsoft Access database using sqlmap, in particular I run this command:
sqlmap -r http.txt --risk 2 --dump-all
Anyway it seems is not retrieving a single information. Am I ...
- 567
8
votes
1
answer
323
views
Is this Windows local code execution bug also a security vulnerability?
I stumbled on a Windows bug leading to code execution. I believe it should be categorized as a vulnerability but Microsoft does not recognize it as such. I would like to read other opinions.
...
- 1,107
1
vote
2
answers
841
views
Can I be sure a Word document is safe if it doesn't have macros
I am aware that MS Word documents can be potentially dangerous due to the executable macros contained within them.
But for a particular document, I have opened the macros and can see there are none. ...
- 111
0
votes
0
answers
222
views
Non-malicious root causes for multiple failed logon in windows domain
While monitoring SIEM alerts, I saw that there was more than 200 failed logon for a user to several hosts in the domain. Obviously, it was triggered as a brute-force attempt.
Assuming it was not an ...
- 21
1
vote
0
answers
956
views
How do you check if someone faked the last modified date or not? [closed]
I think one of my students faked the modified date of his word file. He's last modified date was exactly the deadline of 13:00:00 (even the seconds are zero). How do i figure this out?? I want to know ...
0
votes
0
answers
488
views
Is Microsoft CVE-2020-1045 a credible threat?
Microsoft released CVE-2020-1045 in September 2020.
A security feature bypass vulnerability exists in the way Microsoft
ASP.NET Core parses encoded cookie names.
The ASP.NET Core cookie parser ...
- 181
0
votes
1
answer
416
views
Does fingerprint scanning on Microsoft Authenticator increase security?
tl;dr: I have switched phone and operating system: Android 8.0 --> Android 10.0. Phone restored from backup, so all the remaining is the same except for Microsoft Authenticator that now requires ...
- 3,619
3
votes
1
answer
490
views
Does Kali installed through WSL respect my privacy?
When installing Kali from Microsoft Store, I wasn't prompted with a user agreement license.
Is Microsoft able to monitor my applications? How safe is it to use WSL in that context? (From privacy ...
0
votes
0
answers
76
views
Visual Studio Code on Linux - Privacy risk? [duplicate]
I'm a fan of Visual Studio, and recently installed VSC on my Linux Mint. However recently I did a deep-dive on Richard Stallman's site reading about just how evil and depraved all the big tech ...
- 101
0
votes
1
answer
570
views
Why http microsoft connection in netstat check?
I checked established connections with "netstat" command in command prompt, and I found that there are some connections with ip's of microsoft (I checked ip online) that have http (and not ...
- 3
5
votes
0
answers
341
views
Where can I find a list of all government agencies with CAs in PKI root stores?
Is there a source that monitors popular root stores for CAs controlled by government agencies?
There are several "root stores" that maintain a list of trusted root CAs. These root stores are ...
- 998
2
votes
1
answer
202
views
How to contact Microsoft regarding security flaw? [closed]
Here I see:
If you believe you have found a security vulnerability that meets Microsoft's definition of a security vulnerability, please submit the report to MSRC at https://msrc.microsoft.com/create-...
- 1,250
0
votes
1
answer
144
views
Who (Designer or User) Should be Resposible for the Correct/Secure Usage of a Tool Intended for Developers/Admins? [closed]
There is a healthy debate around a series of stack overflow posts that refer to the "RunAs" command. Specifically the discussion is in reference to design decision that the folks at ...
- 191
27
votes
2
answers
10k
views
What's the point of Microsoft Account 2FA if it still lets me log in using password instead?
I have a Microsoft Account linked to a Microsoft Authenticator app for 2FA purposes. Every time I log in, it first sends me the Authenticator request, but I can always click "Other ways to sign ...
- 441
1
vote
2
answers
212
views
How can I be attacked by opening a corrupt MS Office document?
When opening a corrupt Microsoft Office document, I get a prompt that says something along the lines of:
Excel [or Word/PowerPoint/etc] has found unreadable content on 'filename.xslx'. Do you wish ...
- 173
2
votes
1
answer
159
views
How to tell if Microsoft office has been patched for a vulnerability?
The NIST database holds records for Microsoft Office vulnerabilities, however it only lists the application (i.e. Word 2016) and the service pack. Microsoft release hotfixes outside of service packs, ...
- 181
6
votes
2
answers
7k
views
After changing Microsoft password, one can still login to previously authenticated Windows devices with old password indefinitely. Why?
Has anyone else noticed that if you are using a Microsoft account for Windows, after changing your password, the old password can still be used indefinitely on previously authenticated devices? I have ...
- 173
2
votes
1
answer
28k
views
Microsoft DS vulnerability?
I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files.
How do they transfer files with Microsoft DS?
Do they need an exploit to ...
1
vote
2
answers
11k
views
Microsoft account security alert - Is this legit? [closed]
I've just received two emails in a row stating that "We detected something unusual about a recent sign-in for the Microsoft account" and "someone else might have accessed the Microsoft account..." (...
- 11
1
vote
1
answer
2k
views
How to disable/block Microsoft Store on Windows 10 Pro by firewall?
I want to block Microsoft Store on Windows 10 pro in a corporate environment. Having read relevant articles about this matter and tested on my machine, I see that Windows 10 Pro does not support this ...
- 123
0
votes
1
answer
22k
views
Can my employer see my browsing history with work account on my personal device
I was using Edge on my personal device at home browsing stuff and realised I was logged in on Bing.com with my Microsoft work account. I cleared my browser's browsing history and also Bing's browsing ...
