Category: microsoft

Auto Added by WPeMatico

Microsoft Is Adding New Cryptography Algorithms

Posted on By infossl
cryptography, microsoft, quantum computing, Security technology, Uncategorized

Microsoft is updating SymCrypt, its core cryptographic library, with new quantum-secure algorithms. Microsoft’s details are here. From a news article: The first new algorithm Microsoft added to SymCrypt is called ML-KEM. Previously known as CRYSTALS-Kyber, ML-KEM is one of three post-quantum standards formalized last month by the National Institute of Standards and Technology (NIST). The … Read More “Microsoft Is Adding New Cryptography Algorithms” »

New Windows IPv6 Zero-Click Vulnerability

Posted on By infossl
microsoft, patching, Security technology, Uncategorized, vulnerabilities, windows

The press is reporting a critical Windows vulnerability affecting IPv6. As Microsoft explained in its Tuesday advisory, unauthenticated attackers can exploit the flaw remotely in low-complexity attacks by repeatedly sending IPv6 packets that include specially crafted packets. Microsoft also shared its exploitability assessment for this critical vulnerability, tagging it with an “exploitation more likely” label, … Read More “New Windows IPv6 Zero-Click Vulnerability” »

Online Privacy and Overfishing

Posted on By infossl
artificial intelligence, microsoft, privacy, Security technology, Uncategorized

Microsoft recently caught state-backed hackers using its generative AI tools to help with their attacks. In the security community, the immediate questions weren’t about how hackers were using the tools (that was utterly predictable), but about how Microsoft figured it out. The natural conclusion was that Microsoft was spying on its AI users, looking for … Read More “Online Privacy and Overfishing” »

Personal AI Assistants and Privacy

Posted on By infossl
artificial intelligence, microsoft, privacy, Security technology, trust, Uncategorized

Microsoft is trying to create a personal digital assistant: At a Build conference event on Monday, Microsoft revealed a new AI-powered feature called “Recall” for Copilot+ PCs that will allow Windows 11 users to search and retrieve their past activities on their PC. To make it work, Recall records everything users do on their PC, … Read More “Personal AI Assistants and Privacy” »

Zero-Trust DNS

Posted on By infossl
dns, microsoft, Security technology, Uncategorized

Microsoft is working on a promising-looking protocol to lock down DNS. ZTDNS aims to solve this decades-old problem by integrating the Windows DNS engine with the Windows Filtering Platform—the core component of the Windows Firewall—directly into client devices. Jake Williams, VP of research and development at consultancy Hunter Strategy, said the union of these previously … Read More “Zero-Trust DNS” »

Microsoft and Security Incentives

Posted on By infossl
cybersecurity, incentives, microsoft, national security policy, Security technology, Uncategorized

Former senior White House cyber policy director A. J. Grotto talks about the economic incentives for companies to improve their security—in particular, Microsoft: Grotto told us Microsoft had to be “dragged kicking and screaming” to provide logging capabilities to the government by default, and given the fact the mega-corp banked around $20 billion in revenue … Read More “Microsoft and Security Incentives” »

US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack

Posted on By infossl
china, email, hacking, microsoft, privacy, Security technology, Uncategorized

US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior U.S. government officials. From the executive summary: The Board finds that this intrusion was preventable and should never have occurred. The Board … Read More “US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack” »

Surveillance by the New Microsoft Outlook App

Posted on By infossl
data collection, geolocation, microsoft, privacy, Security technology, surveillance, Uncategorized

The ProtonMail people are accusing Microsoft’s new Outlook for Windows app of conducting extensive surveillance on its users. It shares data with advertisers, a lot of data: The window informs users that Microsoft and those 801 third parties use their data for a number of purposes, including to: Store and/or access information on the user’s … Read More “Surveillance by the New Microsoft Outlook App” »