NewApp Digest
search bot

digital assets

Zero Trust World: Windows and Microsoft 365 security
Winsage
February 22, 2025

Zero Trust World: Windows and Microsoft 365 security

CyberRisk Alliance, LLC emphasizes the importance of copyright protections for digital assets, stating that all materials produced by the organization are protected under copyright law. This includes a stipulation that the material may not be altered or repurposed without prior authorization. Users of the CyberRisk Alliance website must accept the Privacy Policy and Terms of Use, which establishes their rights and responsibilities regarding the use of the site’s resources.
Data protection advancements expected to shape 2025 security
Tech Optimizer
December 27, 2024

Data protection advancements expected to shape 2025 security

Andrew Eva, the Global CIO of Assured Data Protection, predicts that by 2025, there will be a seamless integration of backup systems with ransomware detection, antivirus technologies, and intrusion detection systems. He highlights a collaboration between Rubrik and Google to provide enterprise customers with insights into known exploits for better early detection of malicious codes. Disaster recovery systems will take on a more frontline role in cyber threat management, utilizing machine learning to identify potential viruses. Ransomware is expected to remain the top cyber threat, prompting organizations to prioritize disaster recovery and backup solutions. Concerns about data security in relation to artificial intelligence will lead organizations to seek assurances regarding data protection from managed service providers (MSPs). The criteria for cyber insurance are tightening, making MSPs essential for businesses to meet these requirements. There is also an anticipated surge in demand for Backup-as-a-Service (BaaS), especially in healthcare, driven by resource constraints and a shift towards operational expenditures.
Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws
Winsage
December 10, 2024

Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws

A compilation of vulnerabilities in various Microsoft products has been released, highlighting critical issues that require immediate attention. Key vulnerabilities include: - Microsoft/Muzic Remote Code Execution Vulnerability (CVE-2024-49063) - classified as important. - Microsoft Defender for Endpoint on Android Spoofing Vulnerability (CVE-2024-49057) - rated important. - Microsoft Edge vulnerabilities: - Type Confusion in V8 (CVE-2024-12053) - severity unknown. - Spoofing vulnerability (CVE-2024-49041) - rated moderate. - Microsoft Office vulnerabilities: - Elevation of Privilege Vulnerability (CVE-2024-49059) - rated important. - Elevation of Privilege Vulnerability (CVE-2024-43600) - rated important. - Remote Code Execution Vulnerability in Microsoft Access (CVE-2024-49142) - rated important. - Critical vulnerabilities in Microsoft Excel (CVE-2024-49069) and Publisher (CVE-2024-49079). - SharePoint vulnerabilities: - Information disclosure (CVE-2024-49064, CVE-2024-49062) - rated important. - Elevation of privilege (CVE-2024-49068) - rated important. - Remote code execution (CVE-2024-49070) - rated critical. Critical vulnerabilities in Windows services include: - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2024-49117) - rated critical. - Windows Remote Desktop Services vulnerabilities (CVE-2024-49132, CVE-2024-49115, CVE-2024-49116) - all rated critical. - Windows Lightweight Directory Access Protocol vulnerabilities (CVE-2024-49124, CVE-2024-49112, CVE-2024-49127) - rated critical. - Windows Message Queuing (MSMQ) vulnerabilities (CVE-2024-49118, CVE-2024-49122) - rated critical.
silver Android smartphone
Winsage
November 17, 2024

Did you know that you can double-sort Windows File Explorer contents?

The Downloads folder can become cluttered over time, but users can utilize a secondary sorting feature in the Details view of their folders to organize files more efficiently. To use this feature, open the desired folder, click on a column heading for a primary sort (e.g., by file type), and then Shift-click on a second column (e.g., Date modified) to refine the search. This allows for dual sorting, organizing files by type and further arranging them based on the secondary criterion.
Google Reveals New Chrome Update—Microsoft Warns Windows Users To Change Your Browser
Winsage
October 19, 2024

Google Reveals New Chrome Update—Microsoft Warns Windows Users To Change Your Browser

Google's Chrome holds a 65% market share and faces potential break-up actions from the Department of Justice. Microsoft is promoting its Edge browser to Windows users, highlighting enhanced security features through Microsoft Defender SmartScreen. Microsoft encourages enterprises to adopt Edge, suggesting that employees may also use it at home, threatening Chrome's user base. In response, Google has launched a campaign to reassure its 3 billion Chrome users about its security measures, emphasizing its innovations and commitment to user safety. Google is also addressing privacy concerns related to tracking cookies and plans to introduce an opt-in tracking mechanism, while Microsoft is developing the “Privacy-Preserving Ads API” for Edge. Both companies are focusing on security and privacy as key competitive factors. Chrome has recently updated to version 130.0.6723.58/.59, and users are advised to restart their browsers after the update for optimal security.
How to secure your devices: Updates, antivirus and mobile protection
Tech Optimizer
October 18, 2024

How to secure your devices: Updates, antivirus and mobile protection

Safeguarding devices against cyber threats is essential due to the sensitive personal and financial information they contain. Key security measures include regular software updates, robust antivirus solutions, and protective strategies for mobile devices. To update software and operating systems, users can enable automatic updates in Windows by navigating to Settings > Update & Security > Windows Update and turning on “Automatic Updates.” For macOS, users can go to System Preferences > Software Update and check the box for “Automatically keep my Mac up to date.” Manual checks for updates can be done in both systems through their respective update settings. Antivirus software targets traditional viruses, while anti-malware addresses a wider range of threats. When choosing security software, consider detection rates, system impact, and user interface. Regular scans can be scheduled through the antivirus software's dashboard, and both automatic updates and manual checks should be performed to ensure the latest virus definitions are used. For mobile device security, setting up screen locks is crucial. Android users can set this up in Settings > Security, while iOS users can do so in Settings > Face ID & Passcode or Touch ID & Passcode. Managing app permissions and keeping apps updated are also important for privacy and security. Users should regularly review app permissions and enable automatic updates in their app store settings. To protect against lost or stolen devices, users should activate the “Find My Device/App” feature available on both Android and iOS platforms, allowing them to track, lock, or erase their device remotely.
Crypto Getting Inside the Messaging Apps
AppWizard
October 17, 2024

Crypto Getting Inside the Messaging Apps

Global cryptocurrency ownership surpassed 295 million people in 2021, with messaging applications like Telegram, Facebook Messenger, and WeChat integrating cryptocurrency wallets and payment systems. Telegram introduced The Open Network (TON) for seamless cryptocurrency transactions and has contributed to the growth of Bitcoin casinos. WeChat is exploring the incorporation of China's digital yuan into its payment system. Signal allows users to send MobileCoin, while Japan's Line has launched its own cryptocurrency, LINK. Key drivers for this trend include the demand for financial autonomy, speed and convenience of transactions, and the need for cross-border payment solutions. Younger demographics, particularly Millennials and Gen Z, are leading adoption rates. In-app crypto payments utilize blockchain technology for secure transactions, with a straightforward process for sending and receiving cryptocurrencies. Benefits include convenience, lower fees, and financial inclusion for the unbanked, while challenges involve regulatory hurdles, cryptocurrency volatility, and privacy concerns. The integration of crypto in messaging apps could disrupt traditional banking, affect remittance markets, and prompt partnerships between banks and messaging platforms. Future growth in cryptocurrency adoption within messaging apps is anticipated, with potential mainstream acceptance akin to credit cards and mobile payments.
Microsoft Warns Millions Of Windows Users—Change Your Browser As New Attacks Underway
Winsage
October 12, 2024

Microsoft Warns Millions Of Windows Users—Change Your Browser As New Attacks Underway

Microsoft has issued a warning to Windows users about increasing attacks that exploit legitimate file hosting services, using tactics to evade security measures. These attacks involve fraudulent websites designed to harvest user credentials, prompting Microsoft to recommend the use of Microsoft Edge, which integrates with Microsoft Defender SmartScreen to block malicious sites. Microsoft previously advised Chrome users to update or stop using the browser due to a zero-day vulnerability, encouraging a shift to Edge. The attacks leverage trusted file-sharing platforms like Dropbox and OneDrive, deceiving users into opening malicious files. Microsoft emphasizes using Edge with conditional access policies and Microsoft Defender for enhanced security. Additionally, Microsoft is developing a privacy-preserving ads API for Edge, aiming to improve user privacy while addressing the challenges of third-party cookie tracking. This new API is currently in limited preview and requires manual activation in specific regions.
Microsoft Warns Millions Of Windows Users—Change Your Browser To Stop New Attacks
Winsage
October 9, 2024

Microsoft Warns Millions Of Windows Users—Change Your Browser To Stop New Attacks

Microsoft has issued a warning to Windows users about an increase in sophisticated attacks that use legitimate file hosting services to evade security measures. These attacks often involve fraudulent websites designed to steal user credentials, exploiting trusted platforms like Dropbox, SharePoint, and OneDrive. Microsoft recommends using Microsoft Edge, which can automatically block malicious websites through Microsoft Defender SmartScreen. The company has also advised enterprises to promote Edge and implement conditional access policies to enhance security. Recent trends show attackers manipulating enterprise security systems by using files with restricted access and view-only settings to deliver phishing emails. The ultimate goal of these attacks is typically the theft of organizational credentials for financial gain.
Search