Tech

With Mesh for Teams, Microsoft plans to bring 3D workspaces to remote workers in 2022

Enlarge / An interface and virtual workspace for Mesh for Teams. (credit: Microsoft) Microsoft has announced its intention to create an immersive 3D platform called “Mesh for Teams” for virtual meetings. As the name suggests, Mesh for Teams builds on the company’s existing Teams collaboration platform and implements the mixed reality features of Microsoft Mesh. […]

Tech

Microsoft reclaims title of most valuable public company after Apple falls

Enlarge (credit: Getty Images) Microsoft regained its crown as the most valuable publicly listed company in the world on Friday from Apple, whose shares slumped following a weak quarterly earnings update from the maker of iPhones and Mac computers. Microsoft’s 2.2 percent gain on Friday lifted its market valuation to $2.49 trillion. Apple slid 1.9 […]

Tech

Microsoft reports SIP-bypassing “Shrootless” vulnerability in macOS

Enlarge / The worm says, “I’ve got root! ” (credit: Andreus / Getty Images) The Ms 365 Defender Research Team released a blog post yesterday describing a newly found macOS vulnerability that can abuse entitlement inheritance in macOS’s System Integrity Protection (SIP) to allow execution of arbitrary code with root-level privilege. The vulnerability is listed […]

Tech

Microsoft is “evaluating” right-to-repair options for Xbox and Surface devices

Enlarge / The Surface Pro 8’s replaceable SSD. (credit: Andrew Cunningham) Microsoft’s Xbox and Surface hardware may be getting easier to repair, according to a press release from shareholder advocacy nonprofit As You Sow. According to the announcement, Microsoft has agreed to evaluate and expand the repair options for its products “by the end of […]

Tech

PoC exploit released for Azure AD brute-force bug—here’s what to do

Enlarge (credit: Michael Dziedzic) A public proof-of-concept (PoC) exploit has been released for the Microsoft Azure Active Directory credentials brute-forcing flaw discovered by Secureworks and first reported by Ars. The exploit enables anyone to perform both username enumeration and password brute-forcing on vulnerable Azure servers. Although Microsoft had initially called the Autologon mechanism a “design” […]

Tech

New Azure Active Directory password brute-forcing flaw has no fix

Enlarge (credit: Michael Dziedzic) Imagine having unlimited attempts to guess someone’s username and password without getting caught. That would make an ideal scenario for a stealthy threat actor—leaving server admins with little to no visibility into the attacker’s actions, let alone the possibility of blocking them. A newly discovered bug in Microsoft Azure’s Active Directory […]