Microsoft Support & Discussions
Free PC Help Forum microsoft products support and discussions. If you need help with Microsoft Windows, Windows Server software, Microsoft 365, Microsoft Azure or any other Microsoft product you can post here. If you want to discuss Microsoft and their line of products you can do that here also.
84,928 topics in this forum
-
-
- FPCH Admin
- 0 replies
- 1 view
We are pleased to announce the addition of Microsoft Teams mobile applications to the Microsoft Applications Bounty Program. Through the expanded program we welcome researchers from across the globe to seek out and disclose any high impact security vulnerabilities they may find in Teams mobile applications to help secure customers. Rewards up to $30,000 USD are available for eligible submissions.
Last reply by Cloaked, -
-
Announcing the Top MSRC 2021 Q2 Security Researchers – Congratulations!
by Guest Lynn Miyashita- 0 replies
- 0 views
We’re excited to announce the top contributing researchers for the 2021 Second Quarter (Q2)! Congratulations to all the researchers recognized in this quarter’s leaderboard and thank you to everyone who continues to help secure our customers and the ecosystem. The top three researchers of the 2021 Q2 Security Researcher Leaderboard are: Yuki Chen (765 points), … Announcing the Top MSRC 2021 Q2 Security Researchers – Congratulations! Read More » Continue reading...
-
Protecting customers from a private-sector offensive actor using 0-day exploits and DevilsTongue malware
by Guest Eric Avena- 0 replies
- 0 views
The Microsoft Threat Intelligence Center (MSTIC) alongside the Microsoft Security Response Center (MSRC) has uncovered a private-sector offensive actor, or PSOA, that we are calling SOURGUM in possession of now-patched, Windows 0-day exploits (CVE-2021-31979 and CVE-2021-33771). Private-sector offensive actors are private companies that manufacture and sell cyberweapons in hacking-as-a-service packages, often to government agencies around the world, to hack into their targets’ computers, phones, network infrastructure, and other devices. With these hacking packages, usually the government agencies choose the targets and run the actual operations themselves. The tools, …
-
-
- FPCH Admin
- 0 replies
- 1 view
We’re excited to announce the top contributing researchers for the 2021 Second Quarter (Q2)! Congratulations to all the researchers recognized in this quarter’s leaderboard and thank you to everyone who continues to help secure our customers and the
Last reply by Cloaked, -
-
Microsoft delivers comprehensive solution to battle rise in consent phishing emails
by Guest Eric Avena- 0 replies
- 0 views
Microsoft threat analysts are tracking a continued increase in consent phishing emails, also called illicit consent grants, that abuse OAuth request links in an attempt to trick recipients into granting attacker-owned apps permissions to access sensitive data. This blog offers a look into the current state of consent phishing emails as an initial attack vector and what security administrators can do to prevent, detect, and respond to these threats using advanced solutions like Microsoft Defender for Office 365. Consent phishing attacks aim to trick users into granting permissions to malicious cloud apps in order to gain access to user’s legitimate cloud services. The c…
-
MISA expands portfolio and looks ahead during Microsoft Inspire
by Guest Emma Jones- 0 replies
- 0 views
This blog post is part of the Microsoft Intelligent Security Association (MISA) guest blog series. Learn more about MISA. Welcome to fiscal year 2022 (FY22) and my first official blog as the MISA Lead. It’s been a whirlwind couple of months getting up to speed with all things MISA—closing out FY21 while continuing to build on the great foundation my predecessor laid out as I strategize where to go from here. More to come on that, but first let’s take a moment to reflect and celebrate what MISA and our members have accomplished over the past year and take a sneak peek into what’s next. MISA saw fantastic growth in FY21, having grown to more than 246 member companies,…
-
How Microsoft Security empowers partners to build customer trust
by Guest Emma Jones- 0 replies
- 0 views
As I reflect on my first year at Microsoft, it was both challenging and exceptional: from my remote onboarding in the middle of a pandemic to dramatic changes in the cyber landscape, to Microsoft’s critical role as a frontline responder in some of the most sophisticated cyberattacks in history and leading the security industry. Our world is changing, and Microsoft Security is rising to the challenges of a new normal. I am thrilled and humbled by the milestones we achieved this past year. We surpassed $10 billion in security business revenue, representing more than 40 percent year-over-year growth, and were recognized as a leader in five Gartner Magic Quadrants and seve…
-
Plan your Windows Server 2012 and 2012 R2 End of Support
by Guest Monojit Bhattacharya- 0 replies
- 0 views
Customers trust Windows Server to run their business-critical and mission-critical workloads. With feedback from customers, we are continuing to introduce new innovations for Windows Server workloads on Azure, on-premises, and at the edge. Recently, we announced Windows Server 2022 preview, which introduces advanced multi-layer security, hybrid capabilities, and enhancements to modernize applications with containers. Likewise, we have introduced a number of enhancements such as Azure Automanage for Windows Server and Windows Admin Center in Azure for Windows Server on Azure. As we introduce many innovations for Windows Server, support for older versions along with secu…
-
Welcome to the Windows 365 Tech Community!
by Guest Scott Manchester- 0 replies
- 0 views
As you've hopefully heard by now, this morning we announced the introduction of a new service that takes the venerable Windows operating system to the Microsoft cloud. I'm proud to introduce you to Windows 365, and to the new Tech Community we've created for it. Windows 365 streams a full, personalized Windows experience to end users–including their apps, content, and settings–to any device. Unlike traditional virtual desktop infrastructure (VDI), it does this by leveraging the same skills and tools you already use to deploy and manage physical PCs, at a predictable per-user, per-month price. Windows 365 delivers a Windows 10 or Windows 11 (when generally available) pe…
-
Microsoft discovers threat actor targeting SolarWinds Serv-U software with 0-day exploit
by Guest Eric Avena- 0 replies
- 0 views
Microsoft has detected a 0-day remote code execution exploit being used to attack SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center (MSTIC) attributes this campaign with high confidence to DEV-0322, a group operating out of China, based on observed victimology, tactics, and procedures. The vulnerability being exploited is CVE-2021-35211, which was recently patched by SolarWinds. The vulnerability, which Microsoft reported to SolarWinds, exists in Serv-U’s implementation of the Secure Shell (SSH) protocol. If Serv-U’s SSH is exposed to the internet, successful exploitation would give attackers ability to remotely ru…
-
The dual engine advantage of Internet Explorer Mode
by Guest Eric_VanAelstyn- 0 replies
- 0 views
Whether you're new to IE mode or are already planning for it, here's a closer look at what's going on under the hood and a sneak peek at enhancements to come. A month ago, we announced that the future of Internet Explorer (IE) on Windows 10 is in Microsoft Edge and that the Internet Explorer 11 (“IE11”) desktop application will retire and go out of support on June 15, 2022, for certain versions of Windows 10. At the core of this announcement is Microsoft Edge and its dual engine advantage that brings the web together—both modern and legacy—into a single browser experience. Side by side in Microsoft Edge are the Chromium engine to open modern websites and Internet Explo…
-
Microsoft to acquire RiskIQ to strengthen cybersecurity of digital transformation and hybrid work
by Guest Emma Jones- 0 replies
- 0 views
Organizations are increasingly using the cloud to reimagine every facet of their business. Hybrid work has accelerated this digital transformation, and customers are challenged with the increasing sophistication and frequency of cyberattacks. Today, Microsoft is announcing that we have entered into a definitive agreement to acquire RiskIQ, a leader in global threat intelligence and attack surface management, to help our shared customers build a more comprehensive view of the global threats to their businesses, better understand vulnerable internet-facing assets, and build world-class threat intelligence. As organizations pursue this digital transformation and embrace t…
-
Windows release health now localized in 10 languages
by Guest Mabel_Gomes- 0 replies
- 0 views
We know you have a lot on your plate, and we want to help you manage Windows updates as effectively as possible. We continue to make investments in Windows release health on docs.microsoft.com based on your feedback and are happy to share that this experience is now available in 10 languages! Localization was one of the top requests from last year's survey about the Windows release health experience on Docs. (And you can keep sharing what you like and don’t like on this year’s survey.) As a result, you can now access information about the status of issues, safeguard holds, lifecycle, and feature rollouts in the most requested languages: French (France), German, Spanish…
-
Clarified Guidance for CVE-2021-34527 Windows Print Spooler Vulnerability
by Guest MSRC Team- 0 replies
- 0 views
On Tuesday July 6, 2021, Microsoft issued CVE-2021-34527 regarding a Windows Print Spooler vulnerability. Updates were released on July 6 and 7 which addressed the vulnerability for all supported Windows versions. We encourage customers to update as soon as possible. CVE-2021-34527 – Windows Print Spooler Remote Code Execution Vulnerability. Following the out of band release … Clarified Guidance for CVE-2021-34527 Windows Print Spooler Vulnerability Read More » Continue reading...
-
Microsoft Bug Bounty Programs Year in Review: $13.6M in Rewards
by Guest MSRC Team- 0 replies
- 0 views
Partnering with the security research community is an important part of Microsoft’s holistic approach to defending against security threats. Bug bounty programs are one part of this partnership. By discovering and reporting vulnerabilities to Microsoft through Coordinated Vulnerability Disclosure (CVD), researchers continue to help us secure millions of customers. Over the past 12 months, Microsoft … Microsoft Bug Bounty Programs Year in Review: $13.6M in Rewards Read More » Continue reading...
-
Microsoft named a Visionary in the 2021 Gartner Magic Quadrant for SIEM for Azure Sentinel
by Guest Emma Jones- 0 replies
- 0 views
We’re pleased to announce that in its first year of inclusion in the Gartner Magic Quadrant report, Microsoft Azure Sentinel has been named a Visionary, where we were recognized for our completeness of vision for SIEM.1 Gartner has said that “cloud SIEM will be the future of how many organizations consume technology.”2 We wholeheartedly agree! Today, security teams are constantly asked to do more with less. They need to protect expanding digital estates, detect increasingly advanced threats through huge amounts of noise, and keep up with a massive backlog of investigations. Azure Sentinel is built from the ground up to be completely cloud-native, and it enables secu…
-
-
- FPCH Admin
- 0 replies
- 1 view
Partnering with the security research community is an important part of Microsoft’s holistic approach to defending against security threats. Bug bounty programs are one part of this partnership. By discovering and reporting vulnerabilities to Microsoft through Coordinated Vulnerability Disclosure (CVD), researchers continue to help us secure millions of customers. Over the past 12 months, Microsoft awarded $13.
Last reply by Cloaked, -
-
-
- FPCH Admin
- 0 replies
- 1 view
On Tuesday July 6, 2021, Microsoft issued CVE-2021-34527 regarding a Windows Print Spooler vulnerability. Updates were released on July 6 and 7 which addressed the vulnerability for all supported Windows versions. We encourage customers to update as soon as possible. CVE-2021-34527 - Windows Print Spooler Remote Code Execution Vulnerability. Following the out of band release (OOB) we investigated claims regarding the effectiveness of the security update and questions around the suggested mitigations.
Last reply by Cloaked, -
-
Optimize Windows PC protection and performance with intelligent insights
by Guest Marisa_Rogers- 0 replies
- 0 views
Today there are more than 1.3 billion active monthly devices on Windows 10. To keep these devices updated with feature and quality updates at such scale, we apply machine learning using diagnostic data to generate insights into how an update deployment is going. These insights help us better understand the dependencies between different components in the diverse ecosystem of Windows devices and applications, and help us maintain our focus on compatibility, one of our top priorities for updating Windows devices. Our goal is to keep all Windows devices running smoothly and without interruption. To support you as you configure and manage updates across your organization, …
-
How to build a privacy program the right way
by Guest Emma Jones- 0 replies
- 0 views
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with attorney Whitney Merrill, an expert on privacy legal issues and Data Protection Officer and Privacy Counsel at Asana. The thoughts below reflect her views, not the views of her employer, and are not legal advice. In this blog, Whitney talks about building a privacy program and offers best practices for privacy training. Natalia: How do security, privacy, and regulatory compliance intersect? Whitney: Security and pr…
-
Accessibility and usability for all in Azure Sentinel
by Guest Emma Jones- 0 replies
- 0 views
As a father of a child on the Autism spectrum who relies completely on digital media for his learning, I fully appreciate the impact that digital accessibility can have on people with disabilities. Designing with accessibility in mind greatly expands the impact of Microsoft solutions. What many don’t realize, however, is that the impact of accessible design is even bigger than that. When we design for accessibility, everyone benefits. For example, television video captioning was initially designed for the benefit of people who are hard-of-hearing. Today, it’s far more widely used, such as in loud places where people still want to watch TV and follow the context of the …
-
Out-of-Band (OOB) Security Update available for CVE-2021-34527
by Guest MSRC Team- 0 replies
- 0 views
Today Microsoft released an Out-of-Band (OOB) security update for CVE-2021-34527, which is being discussed externally as PrintNightmare. This is a cumulative update release, so it contains all previous security fixes and should be applied immediately to fully protect your systems. The fix that we released today fully addresses the public vulnerability, and it also includes a new feature that allows customers to implement stronger protections. See: KB5005010: … Out-of-Band (OOB) Security Update available for CVE-2021-34527 Read More » Continue reading...
-
Preparing for your migration from on-premises SIEM to Azure Sentinel
by Guest Emma Jones- 0 replies
- 0 views
The pandemic of 2020 has reshaped how we engage in work, education, healthcare, and more, accelerating the widespread adoption of cloud and remote-access solutions. In today’s workplace, the security perimeter extends to the home, airports, the gym—wherever you are. To keep pace, organizations require a security solution that delivers centralized visibility and automation; one that can scale to meet their needs across a decentralized digital estate. As a cloud-native security information and event management (SIEM) solution, Microsoft Azure Sentinel is designed to fill that need, providing the scope, flexibility, and real-time analysis that today’s business demands. In…
-
-
- FPCH Admin
- 0 replies
- 1 view
Today Microsoft released an Out-of-Band (OOB) security update for CVE-2021-34527, which is being discussed externally as PrintNightmare. This is a cumulative update release, so it contains all previous security fixes and should be applied immediately to fully protect your systems. The fix that we released today fully addresses the public vulnerability, and it also includes a new feature that allows customers to implement stronger protections.
Last reply by Cloaked, -
-
Proven tools to accelerate your move to Microsoft Edge
by Guest Brian Shiers- 0 replies
- 0 views
With the announcement that the future of Internet Explorer on Windows 10 is in Microsoft Edge, you might be thinking, how do I start moving from Internet Explorer 11 (“IE11”) to Microsoft Edge? Whether you rely on IE11 exclusively or use it in tandem with another browser to specifically access older legacy websites and applications, Microsoft is committed to helping you prepare and move to its replacement: Microsoft Edge with Internet Explorer mode (IE mode). Editor’s note: Welcome to the IE to Edge blog series, an ongoing series of articles designed to help you move from Internet Explorer 11 to Microsoft Edge! Each will focus on a different relevant topic to h…