The Benefits of Microsoft 365 Business for Small Businesses

Explore the benefits of Microsoft 365 Business for small businesses. Technijian offers insights and support to help you leverage this powerful tool.

“Cookie Bite” Entra ID Attack Exposes Microsoft 365

“Cookie Bite” Entra ID Attack Exposes Microsoft 365: A Critical Cloud Security Wake-Up Call

Ravi Jain
“Cookie Bite” attack, a novel method where malicious browser extensions steal authentication cookies like ESTSAUTH and ESTSAUTHPERSISTENT from users of Microsoft 365 and Azure Entra ID. By leveraging these cookies, attackers can bypass Multi-Factor Authentication (MFA) and hijack legitimate sessions, gaining unauthorized access to services like Outlook, Teams, and SharePoint. This attack is particularly dangerous because it operates within the browser and does not require system-level compromise, making it difficult to detect through traditional security measures. The article highlights the risks of this attack, including data exfiltration and internal impersonation, and outlines mitigation strategies such as monitoring risk-based sign-ins, implementing browser-level protections, and limiting session persistence. It also introduces Technijian's security services as a solution to protect against this and similar threats. ... Read More
Microsoft Vulnerabilities Skyrocket

Microsoft Vulnerabilities Skyrocket: 1,360 Reported in 2024

Ravi Jain
A recent report highlights a significant surge in Microsoft vulnerabilities in 2024, reaching a record high of over 1,360 reported cases. The analysis indicates that Elevation of Privilege vulnerabilities were particularly prevalent, emphasizing the need for improved access controls. While some platforms stabilized, browsers, operating systems, and productivity tools like Microsoft Edge and Office experienced notable increases in flaws, including critical ones. Experts advise that patching alone is insufficient, advocating for a layered security approach incorporating zero trust principles and advanced threat detection. Cybersecurity firms like Technijian offer services to help organizations strengthen their defenses against these growing Microsoft-related threats. ... Read More
Alarming Upgrades in Tycoon2FA

Alarming Upgrades in Tycoon2FA: The Evolving Threat to Microsoft 365 Security

Ravi Jain
Emergence and increasing sophistication of Tycoon2FA, a Phishing-as-a-Service platform specifically designed to bypass multi-factor authentication, particularly for Microsoft 365 and Gmail accounts. It highlights new evasion techniques employed by Tycoon2FA, such as invisible Unicode characters, custom CAPTCHAs, and anti-debugging scripts, making it a significant threat. The text also discusses a surge in phishing attacks leveraging malicious SVG files to deliver credential-stealing JavaScript. Finally, it offers recommendations for defense, including blocking SVG attachments, using phishing-resistant MFA, and enhancing employee awareness, while also briefly introducing Technijian as a provider of relevant security services. ... Read More
OAuth Attacks Target Microsoft 365 & GitHub

OAuth Attacks Target Microsoft 365, GitHub: A Deep Dive into the Latest Threats

Ravi Jain
Ongoing cyberattacks are exploiting the OAuth protocol on platforms like Microsoft 365 and GitHub. Cybercriminals are using deceptive tactics with fake applications mimicking trusted brands such as Adobe, DocuSign, and even GitHub itself. These malicious apps trick users into granting broad permissions, enabling attackers to gain persistent access and potentially redirect victims to phishing sites or deploy further attacks, targeting sectors with sensitive data. Organizations are advised to implement strong security measures, including limiting app permissions, employing conditional access policies, regularly auditing applications, and educating users to recognize these evolving threats. ... Read More
Windows Hyper-V Vulnerability

Critical Windows Hyper-V NT Kernel Vulnerability Allows SYSTEM Privilege Escalation – PoC Released

Ravi Jain
CVE-2025-21333 is a critical vulnerability found in Microsoft's Hyper-V NT Kernel Integration VSP, enabling attackers to escalate privileges to SYSTEM level. This heap-based buffer overflow in the vkrnlintvsp.sys driver impacts containerized VMs like Windows Sandbox. Exploitation involves manipulating the I/O ring buffer to gain arbitrary read/write access in kernel memory, with a proof of concept demonstrating the technique. Microsoft has released a patch in the January 2025 updates, and organizations are advised to apply it promptly along with enabling advanced security features. The vulnerability poses significant risks including compromising confidentiality, violating system integrity, and disrupting system availability. ... Read More