Unlocking Business Potential with Microsoft 365 | Technijian Technology

Explore the transformative power of Microsoft 365 with Technijian Technology. Our blog delves into the features, benefits, and impact of leveraging Microsoft 365 for unlocking your business’s full potential in the digital landscape.

Oracle Data Breach Allegations 2025

Oracle Denies Shocking Data Breach Claims: Hacker Alleges Theft of 6 Million Records

A hacker known as "rose87168" is claiming to have breached Oracle Cloud, alleging the theft of six million sensitive records and offering this data for sale. Oracle has strongly refuted these claims, asserting that their cloud services were not compromised and no customer data was lost. Despite Oracle's denial, cybersecurity experts are advising users to take precautionary measures like monitoring access logs and rotating credentials. The alleged breach purportedly exploited a vulnerability in a software package used by Oracle, with the hacker claiming to have provided proof of access. The cybersecurity community is currently divided on the validity of these claims. Technijian, a cybersecurity firm, recommends proactive security measures for Oracle Cloud users, regardless of the breach's confirmation. ... Read More
OAuth Attacks Target Microsoft 365 & GitHub

OAuth Attacks Target Microsoft 365, GitHub: A Deep Dive into the Latest Threats

Ongoing cyberattacks are exploiting the OAuth protocol on platforms like Microsoft 365 and GitHub. Cybercriminals are using deceptive tactics with fake applications mimicking trusted brands such as Adobe, DocuSign, and even GitHub itself. These malicious apps trick users into granting broad permissions, enabling attackers to gain persistent access and potentially redirect victims to phishing sites or deploy further attacks, targeting sectors with sensitive data. Organizations are advised to implement strong security measures, including limiting app permissions, employing conditional access policies, regularly auditing applications, and educating users to recognize these evolving threats. ... Read More
Windows Hyper-V Vulnerability

Critical Windows Hyper-V NT Kernel Vulnerability Allows SYSTEM Privilege Escalation – PoC Released

CVE-2025-21333 is a critical vulnerability found in Microsoft's Hyper-V NT Kernel Integration VSP, enabling attackers to escalate privileges to SYSTEM level. This heap-based buffer overflow in the vkrnlintvsp.sys driver impacts containerized VMs like Windows Sandbox. Exploitation involves manipulating the I/O ring buffer to gain arbitrary read/write access in kernel memory, with a proof of concept demonstrating the technique. Microsoft has released a patch in the January 2025 updates, and organizations are advised to apply it promptly along with enabling advanced security features. The vulnerability poses significant risks including compromising confidentiality, violating system integrity, and disrupting system availability. ... Read More
Ransomware Gangs Pose as IT Support in Microsoft Teams Phishing Attacks

Ransomware Gangs Pose as IT Support in Microsoft Teams Phishing Attacks

Ransomware gangs are exploiting Microsoft Teams' default settings to launch sophisticated phishing attacks. These attacks involve email bombing to overwhelm victims, followed by impersonation of IT support via Teams to gain remote access. Attackers use this access to install malware, such as RPivot and Black Basta ransomware. The article emphasizes the importance of restricting external Teams communication, enhancing user awareness, and deploying advanced security tools to mitigate this threat. Finally, it highlights the potential involvement of the FIN7 cybercrime group. ... Read More
Microsoft Relaunches Copilot for Business

Microsoft Relaunches Copilot for Business with Free AI Chat and Pay-As-You-Go Agents

Microsoft has launched Microsoft 365 Copilot Chat, a free AI-powered chat tool with optional paid AI agents accessible via pay-as-you-go or Azure consumption packs. This offers businesses a cost-effective way to integrate AI, automating tasks and providing data analysis. Customization options are available through Copilot Studio, allowing businesses to tailor AI agents to their specific needs. While a free version exists, a premium version offers enhanced features integrated directly within Microsoft Office apps. The offering aims to democratize AI adoption, improving productivity and security while remaining budget-friendly. ... Read More