OSN April 9, 2021

Title: CISA Releases Post-Compromise Tool Aviary to Review Microsoft 365 Date Published: April 9, 2021 CISA releases post-compromise tool Aviary to review Microsoft 365 Excerpt: “Sparrow checks and installs the required PowerShell modules on the machine to analyze,...

OSN MARCH 17, 2021

Title: Microsoft’s Azure Sdk Site Tricked Into Listing Fake Package Date Published: March 17, 2021 https://www.bleepingcomputer.com/news/security/microsofts-azure-sdk-site-tricked-into-listing-fake-package/ Excerpt: “A security researcher was able to add a...

OSN MARCH 4, 2021

Title: DHS Orders Agencies to Urgently Patch or Disconnect Exchange Servers Date Published: March 4, 2021 https://www.bleepingcomputer.com/news/security/dhs-orders-agencies-to-urgently-patch-or-disconnect-exchange-servers/ Excerpt: “CISA “strongly”...

OSN March 3, 2021

Title: Microsoft Accuses China Over Email Cyber-Attacks Date Published: March 3, 2021 https://www.bbc.com/news/business-56261516 Excerpt: “Microsoft’s Threat Intelligence Centre attributed the attacks with “high confidence” to Hafnium, a group...

OSN FEBRUARY 5, 2021

Title: Hacking Group Also Used an IE Zero-Day Against Security Researchers Date Published: February 4, 2021 https://www.bleepingcomputer.com/news/security/hacking-group-also-used-an-ie-zero-day-against-security-researchers/ Excerpt: “To perform their attacks, the...