Microsoft Office 365 Archives - Cyber Security Minute

New AlienFox toolkit harvests credentials for tens of cloud services

Issued by: Security Affairs

AlienFox is a new modular toolkit that allows threat actors to harvest credentials for multiple cloud service providers. AlienFox is available for sale and is primarily distributed on Telegram in the form of source code archives. Some modules are available on GitHub allowing threat actors to customize their malicious code to suit their needs. AlienFox…

Vulnerabilities

Flaw in Microsoft OME Could Lead to Leakage of Encrypted Data

Issued by: Security Week

Issues with ECB are not unknown. In its Announcement of Proposal to Revise Special Publication 800-38A, NIST wrote, “The ECB mode encrypts plaintext blocks independently, without randomization; therefore, the inspection of any two ciphertext blocks reveals whether or not the corresponding plaintext blocks are equal… the use of ECB to encrypt confidential information constitutes a…