@pagnora
According to a post forwarded by 23pds, Chief Information Security Officer of SlowMist Technology, a vulnerability in Microsoft Defender could allow attackers to bypass authentication and upload malicious files. Serious vulnerabilities were discovered in the network communication between Microsoft Defender for Endpoint (DFE) and its cloud services. These vulnerabilities allow attackers who have compromised the system to bypass authentication, forge data, leak sensitive information, and even upload malicious files to investigation packages.
0 reply
0 recast
0 reaction