#MicrosoftDefender

Matthias SchüsslerMrClicko
2025-06-01

Die diese Woche im Blog:
5️⃣ Datenaustausch zwischen Windows und Android ohne Umweg: blog.clickomania.ch/2025/05/26
4️⃣ : Wie man bei Handy-Spielen kein Geld rauswirft: blog.clickomania.ch/2025/05/27
3️⃣ : Ein Sicherheits-Feigenblatt von Microsoft: blog.clickomania.ch/2025/05/29
2️⃣ : Wo früher Blogs darbten, blüht heute ein Milliardenbusiness: blog.clickomania.ch/2025/05/30
1️⃣ Warum es sich lohnt, KI-Auskünfte zu dokumentieren: blog.clickomania.ch/2025/05/28

Person, die Geld zählt.
Matthias SchüsslerMrClicko
2025-05-29

soll Android-Telefone und das iPhone schützen. Ist das nötig und funktioniert es überhaupt? Das Fazit nach dem Test: Nutzen fragwürdig, bei gewissen Risiken. blog.clickomania.ch/2025/05/29

2025-05-17

A new twist in cybersecurity: a tool called Defendnot is tricking Windows into shutting off Microsoft Defender—leaving your system exposed. How safe is your PC when even built-in defenses can be deceived?

thedefendopsdiaries.com/defend

#defendnot
#microsoftdefender
#cybersecurity
#windowsvulnerabilities
#infosectrends

2025-05-13

Microsoft Office and Defender will support Windows 10 through at least 2028 (even though Windows 10 support ends this year)

Microsoft is ending Windows 10 support for most users on October 14, 2025 and the company has been urging users to upgrade to Windows 11. But in what seems to be a tacit acknowledgment that a lot of people aren’t planning to do that just yet, the company has quietly updated support pages for some of its products to note that they’ll continue to work on Windows 10 for a few more years.

For […]

#microsoft #microsoft365 #microsoftDefender #windows #windows10

Read more: liliputing.com/microsoft-offic

PUPUWEB Blogpupuweb
2025-05-07

WSUS & SCCM suddenly stopped delivering Defender updates after May 2, 2025-leaving IT teams scrambling. Discover what caused the outage, how it was fixed, and key tips to stay protected!

pupuweb.com/why-did-wsus-and-s

2025-05-03

I´m interviewing candidates for this remote L2 SOC Analyst role (Mexico-based) this weekend.

recruiterflow.com/nsc/jobs/40

2025-05-03

I´m interviewing candidates for this remote L2 SOC Analyst role (Mexico-based) this weekend.

recruiterflow.com/nsc/jobs/40

#Mexico #HiringNow #SocAnalyst #MicrosoftSentinel #MicrosoftDefender #Remote #WFH

Marcel SIneM(S)USsimsus@social.tchncs.de
2025-04-27

Dieser Artikel ist sicherlich schon anderthalb Jahre alt - zu erkennen daran, dass #Windows7 und 8.1 erwähnt werden - für #Windows10 und 11 aber sicherlich noch gültig.
Ansonsten: Desinfec't von heise nutzen 😉

#MicrosoftDefender Offline-Scan gegen Rootkits - pctipp.ch pctipp.ch/praxis/sicherheit/mi #Malware #Rootkit #Microsoft #Windows :windows: #Windows11

Torsten :verified: :verified:tor@norden.social
2025-04-18

I'd like to change a password of a local account on Windows 10.

Can #chntpw still do the job in 2025 (with #SAM)?

I have read that Windows Defender blocks some changes like #sethc, #utilman and so on ...

#Windows #Linux #Windows10 #WindowsDefender #MicrosoftDefender #infosec #fedihelp

2025-04-17

🎁 NEW UPDATE:

I've added a small challenge to my FREE "Hands-On Introduction to KQL for Security Analysis" course.

More will be coming soon!

#KQL #Kusto #MicrosoftDefender #MicrosoftSentinel
👇
academy.bluraven.io/course/int

Free Unlimited KQL Lab Access
John M. Gamblejgamble@fosstodon.org
2025-04-17

RGB software is unfortunately based on unsupported and disavowed software.

Yes, the XKCD cartoon is referenced.

#rgb #software #MicrosoftDefender #CVE

youtu.be/H_O5JtBqODA

2025-04-11

Microsoft Defender now automatically isolates unknown devices to stop threats in their tracks without disrupting your network. Imagine a system that stays one step ahead of attackers—ready for smarter security?

thedefendopsdiaries.com/enhanc

#microsoftdefender
#networksecurity
#endpointprotection
#cybersecurity
#automaticattackdisruption

2025-03-11

Proxies aren’t the enemy—they’re the bridge. 🔐

Defender for Endpoint needs the cloud to deliver real-time protection, but in restricted networks, proxies remain essential. With fewer URLs to allow-list in 2025, securely enabling Defender is easier than ever.

Read how to get it right: blog.brianbaldock.net/mde-prox

#CyberSecurity #MicrosoftDefender #XDR #Proxies

2025-03-04

@DavidGoldfield Is #MicrosoftDefender the best thing for those of us who use #Screen-readers? What do you recommend?

Microsoft Defender will really just flag arbitrary files as malicious with zero evidence, it's just like "trust me bro that's malware I promise, you should delete it". Second biggest waste of money right after Microsoft Support.
#microsoft #microsoftdefender

2025-02-13

🤔 Why Sign Up for Continuing Education Classes?

🔹 **Stay Updated:** New features and updates are released daily. Don’t get left behind!
🔹 **Enhance Your Skills:** Deepen your understanding and expertise in cybersecurity and device management.

Join our community of learners! 💻📚 Sign up today and be part of the future of technology. Your journey to mastering Defender and Intune starts here! 🌟thirdtier.net/product/defender

#MicrosoftDefender #Intune #ContinuingEducation #StayUpdated #Cybersecurity #DeviceManagement

🚨 #XWorm leverages LOLBAS techniques to abuse #CMSTPLUA

CMSTPLUA is a legitimate Windows tool that can be exploited for system binary proxy execution using #LOLBAS techniques, bypassing security controls like #UAC, and executing #malicious code, putting organizations at risk.

⚙️ With Script Tracer in #ANYRUN Sandbox, a SOC team can analyze scripts more efficiently. It simplifies script breakdowns, making it easier to understand their behavior and get key insights.
The #script embedded in the INF file is used to coordinate an execution chain:
1️⃣ EXE starts cmstp.exe which is used to launch a #malicious script from an #INF file.

2️⃣ CMSTPLUA ➡️ mshta.exe ➡️ cmd.exe ➡️ EXE ➡️ PowerShell
#MSHTA loads a #VBScript from memory to run an executable and shuts down the #CMSTP process.
– EXE launches #PowerShell to add itself to #MicrosoftDefender exceptions.

3️⃣ Finally, it runs the XWorm #payload from the #System32 directory and adds itself to the Scheduled Task for persistence.

👨‍💻 Check out the analysis and see Script Tracer in action:
app.any.run/tasks/9352d612-8ea

Living-off-the-Land techniques have been leveraged for years to execute malicious operations using legitimate system utilities.
Use these TI Lookup search queries to find similar samples and improve the efficiency of your organization's security response:
🔍 intelligence.any.run/analysis/
🔍 intelligence.any.run/analysis/

Analyze latest #malware and #phishing threats with #ANYRUN 🚀

#cybersecurity #infosec

2025-02-13

🌟 Stay Ahead in Tech! 🌟
Are you ready to level up your skills in Microsoft Defender and Intune? 🚀 With technology evolving every month, it's crucial to stay informed and ahead of the curve. 🌐

📚 Sign up today and be part of the future of technology. thirdtier.net/product/defender

#TechEducation #MicrosoftDefender #Intune #ContinuingEducation #StayUpdated

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst