Author: admin

MicrosoftSecurity

Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability

Credit to Author: Microsoft Threat Intelligence| Date: Wed, 18 Oct 2023 16:30:00 +0000

Since early October 2023, Microsoft has observed North Korean nation-state threat actors Diamond Sleet and Onyx Sleet exploiting the Jet Brains TeamCity CVE-2023-42793 remote-code execution vulnerability. Given supply chain attacks carried out by these threat actors in the past, Microsoft assesses that this activity poses a particularly high risk to organizations who are affected.

The post Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

Expanding audit logging and retention within Microsoft Purview for increased security visibility

Credit to Author: Rudra Mitra| Date: Wed, 18 Oct 2023 16:00:00 +0000

Since our announcement in July 2023, we have made significant efforts to enhance the access of Microsoft Purview’s audit logging. This ongoing work expands accessibility and flexibility to cloud security logs. Read about the additional updates coming to Microsoft Purview Audit in the coming weeks.

The post Expanding audit logging and retention within Microsoft Purview for increased security visibility appeared first on Microsoft Security Blog.

Read More