Microsoft Warns of Active Password Stealing Attack Exploiting the Microsoft 365 Service Disruption
Matched: health
Microsoft warned of a phishing campaign exploiting the November 12 Microsoft 365 outage. Emails impersonate service health notices, cite real incident ID EX1550543, and claim messages will be deleted within 24 hours unless recipients click a recovery link. Three sender domains were identified, with links redirecting through SendGrid to a suspicious site. Microsoft recommends verifying disruptions via the admin center and reviewing Safe Links policies.
Phishers quick to exploit extended M365 outage
Matched: health
During a recent Microsoft 365 outage, phishers quickly sent fake service health notifications warning users their emails were being held and would be deleted unless they clicked a link to restore access. The emails impersonated Microsoft's legitimate outage alerts, exploiting user anxiety during the disruption to steal credentials. Users are urged to verify alerts only through official Microsoft channels.
Microsoft 365 Massive Outage – Fixes Fail as Restored Servers Keep Going Unresponsive
Matched: health
A Microsoft 365 outage exceeding 10 hours continues as restored servers repeatedly fail under user traffic load. Beginning November 12, 2026, the disruption spread from Exchange Online to Teams, SharePoint, Copilot, and Defender across all regions. Microsoft is rebuilding servers on previous configurations, limiting traffic, and rerouting load while analyzing root cause. Over 120,000 Outlook reports peaked across 74 countries. No cyberattack is involved.
Massive Microsoft 365 Outage Impacts Exchange Online, Teams, SharePoint, Copilot, and Defender XDR Users
Matched: health
A major Microsoft 365 outage beginning November 12, 2026 disrupted Exchange Online, Teams, SharePoint, Copilot, and Defender XDR globally. Microsoft attributed the failure to servers unexpectedly going offline, overloading remaining infrastructure. Failed automated health checks complicated recovery, with restored servers becoming unresponsive under traffic load. Engineers rerouted traffic and explored configuration rollbacks. Full restoration had not been confirmed. Administrators should monitor incidents MO1550821 and EX1550543 in the Microsoft 365 admin center.
Microsoft Teams Outage Hits Users in North America
Matched: health
Microsoft is investigating a Teams outage affecting North American users, tracked as TM1550488 in the Microsoft 365 admin center. Automated recovery measures are underway, with telemetry showing reduced impact, though full restoration is unconfirmed. No root cause, timeline, or affected features have been specified. Administrators are advised to monitor the admin center and document user-reported issues for comparison against official updates.
nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types
Matched: medical
nDiligence has released a four-year study identifying a supply-chain vulnerability affecting all 50 software and device types examined, with 46 rated critical or high risk. The flaw targets runtime client-side rendering, where attackers compromising any supplier in an app's chain can alter what users see and do after all security checks have passed. Affected platforms include browsers, medical devices, and industrial controls. Full research is freely available at atg.nDiligence.com.
Hackers Abuse Cruciferra Malware-as-a-Service to Conceal Infostealers and Remote Access Trojans
Matched: health
Cybercriminals are renting a crypter tool called Cruciferra to hide infostealers and RATs from security software. Priced at $450–$2,000 monthly, it uses 90+ encryption routines, DLL side-loading, sandbox detection, and BYOVD driver attacks to evade defenses. Active since October 2025 and linked to the older KGB cryptor, it has prompted over 700,000 blocked compromise attempts since January 2026, primarily targeting Türkiye, Greece, and Spain. Payloads include AsyncRAT, XWorm, and Agent Tesla.
Top 10 Best HIPAA Compliance Software in 2026 [Ranked & Scored]
Matched: health
Vanta tops a 2026 ranking of HIPAA compliance software, followed by Drata and Compliancy Group. The list splits tools into two buyer categories: vendor-proof automation platforms for digital-health companies seeking certification, and covered-entity coaching tools for healthcare providers. Paubox and Censinet appear as specialist options for encrypted email and healthcare vendor risk management. Reviewers weighted lane-core capability, risk-assessment depth, and BAA tracking in their scoring methodology.
Top 10 Best IT & Cyber Risk Management Tools in 2026 [Ranked & Scored]
Matched: health
A 2026 ranking scores ten IT and cyber risk management platforms on register workflow, control linkage, scoring range, and reporting. ServiceNow leads for wiring risk registers to live operations; Archer ranks second for deep methodology configurability; LogicGate third for no-code speed. MetricStream suits federated enterprises, Diligent excels at board reporting, and IBM OpenPages serves regulated industries with AI assistance. Riskonnect unifies insurable and cyber risk, Balbix provides exposure math, SAI360 covers operational compliance, and Vanta offers a compliance-fed starter register. The defining 2026 theme is register freshness—tracking what percentage of entries have a current owner, treatment, and review date.
.webp)
Criminal IP Launches New TI Feed App on Splunkbase for Automated Threat Detection
Matched: health
AI SPERA has launched the Criminal IP TI Feed app for Splunk on Splunkbase. The app automatically correlates Criminal IP threat intelligence with firewall traffic logs to identify whether organizational assets communicated with malicious IPs and if sessions were completed. It runs correlation searches every 10 minutes, performs 30-day retrospective analysis, and offers seven dashboards plus Slack alerting to help SOC teams prioritize threats efficiently.