Details Revealed on Microsoft Dynamics 365 Web API Bugs

January 3, 2025January 3, 2025

Title: Critical Vulnerabilities Discovered in Microsoft Dynamics 365 and Power Apps Web API

Introduction
Recent research by Stratus Security has unveiled three critical vulnerabilities in Microsoft Dynamics 365 and Power Apps Web API that pose significant risks of data compromise. These flaws, which were addressed by Microsoft earlier this year, highlight the ongoing challenges in cybersecurity for enterprises that manage sensitive information. Understanding these vulnerabilities is essential for businesses using these platforms, as they could lead to serious data breaches if not properly mitigated.

Understanding the Vulnerabilities in Microsoft Dynamics 365 and Power Apps
The discovery of these vulnerabilities emphasizes the importance of maintaining robust security measures. The first two vulnerabilities are related to the Power Platform’s OData Web API Filter. Here’s a breakdown of the issues:

Inadequate Access Control: This flaw allows unauthorized access to sensitive data, potentially enabling attackers to obtain complete hashes.
OrderBy Clause Exploitation: The second issue involves the misuse of the orderby clause in the OData Web API, which can be leveraged to extract critical database information.

The third vulnerability pertains to the FetchXML API, which can be exploited to create an orderby query that bypasses existing access controls.

The Importance of Cybersecurity Vigilance
As highlighted by Stratus Security, the identification of these vulnerabilities serves as a crucial reminder for organizations, especially those handling large datasets like Microsoft. Cybersecurity is an ongoing process that requires constant attention and proactive measures to safeguard against emerging threats.

How Organizations Can Protect Themselves
To mitigate risks associated with these vulnerabilities, organizations should consider the following strategies:

Regular Security Audits: Conduct frequent assessments of your security protocols and API usage.
Implement Access Controls: Ensure that access controls are stringent and regularly updated to prevent unauthorized access.
Stay Informed: Keep up to date with the latest security patches and updates provided by software vendors.

For more insights on effective cybersecurity practices, you can check out our article on Best Practices for Securing APIs or explore Microsoft’s Security Updates.

Conclusion
The vulnerabilities discovered in Microsoft Dynamics 365 and Power Apps Web API underscore the necessity of continuous vigilance in cybersecurity. Businesses leveraging these platforms must remain proactive in their security measures to protect sensitive data from potential breaches.

Call to Action
We invite our readers to share their thoughts on these vulnerabilities or their experiences with Microsoft Dynamics 365 and Power Apps. For more related articles on cybersecurity and data protection, be sure to check our latest posts!

Chinese Cyberattack Hits More US Telecom Companies

January 6, 2025January 6, 2025

U.S. telecommunications companies, including Windstream, Consolidated Communications, and Charter Communications, have been targeted by the Chinese state-sponsored hacker group Salt Typhoon. This group has exploited vulnerabilities in Fortinet network devices and Cisco routers, affecting nine telecom firms, including AT&T and T-Mobile. National Security Advisor Jake Sullivan has briefed industry executives about the threats, highlighting potential risks to critical infrastructure like power grids and ports. In response, AT&T, Lumen, and Verizon reported removing unauthorized access, while T-Mobile successfully thwarted multiple attacks. The situation underscores the urgent need for enhanced cybersecurity measures across the sector.

Netis Routers Face Serious Authentication and RCE Vulnerabilities

January 8, 2025January 8, 2025

Recent research has uncovered critical vulnerabilities in various Netis router models, including NX10 and MW5360, posing risks like information disclosure, authentication bypass, and remote code execution (RCE). The vulnerabilities, reported by cybersecurity expert h00die-gr3y, include CVE-2024-48456, which allows attackers to hijack the admin password reset feature, and CVE-2024-48457, enabling unauthorized password changes. These flaws can be exploited in tandem, compromising user security. As no fixes are available from Netis, users are urged to change default passwords, monitor network activity, and regularly check for firmware updates to safeguard their devices against potential cyber threats.

Claims of 7-ZIP Zero-Day Vulnerability Discredited

Ford Confirms Hack of Its X Account

January 2, 2025January 2, 2025

Ford Motor Company has reported a significant cybersecurity breach involving its official X account (formerly Twitter), where unauthorized posts with pro-Palestine and anti-Israel messages were made. This incident prompted Ford to launch an internal investigation to determine how the breach occurred. Experts stress the increasing need for robust cybersecurity measures, noting that cybercriminals often target social media managers or exploit platform vulnerabilities. To protect against such threats, companies should implement regular employee training, multi-factor authentication, and security audits. The breach highlights the critical importance of safeguarding online presence to maintain brand reputation and customer trust.

Chinese Hackers Exploit VSCode Remote Tunnels for Espionage

December 11, 2024December 11, 2024

A suspected Chinese cyberespionage campaign, dubbed Operation Digital Eye, has targeted major South European B2B IT service providers. Reported by The Hacker News, this operation occurred between June and July using advanced techniques that exploited Visual Studio Code Remote Tunnels and Microsoft Azure for command-and-control activities. Attackers utilized SQL injection to breach internet-exposed applications, followed by tactics like PHPsert webshell distribution and credential compromise. The incidents highlight severe vulnerabilities in the cybersecurity landscape, emphasizing the need for regular security audits, enhanced monitoring, and employee training to combat sophisticated cyber threats effectively.

Taiwan Struggles with Rising Cyberattacks from China

January 8, 2025January 8, 2025

Taiwan has reported a staggering average of 2.4 million cyberattacks daily, more than double last year’s figures, primarily attributed to Chinese forces. Critical sectors such as telecommunications, transportation, and defense have been heavily targeted, disrupting essential services and revealing significant vulnerabilities. Attack methods include Distributed Denial-of-Service (DDoS) and advanced persistent threats (APTs), as well as social engineering tactics aimed at civil servants. The Taiwanese government accuses China of “grey-zone harassment” coinciding with military drills, urging a need for enhanced cybersecurity. Recommended measures include investing in advanced technologies, training for civil servants, and fostering international collaboration.

WordPress Plugin Vulnerability Leads to Malware Installation

December 19, 2024December 19, 2024

A critical zero-day vulnerability (CVE-2024-11972) in the Hunk Companion WordPress plugin is being actively exploited by cybercriminals, posing severe security risks to over 10,000 installations. This flaw allows unauthorized POST requests, enabling the installation of outdated and vulnerable plugins, including those with known exploits like remote code execution and SQL injection. Despite the release of an update (version 1.9.0) to address the issue, only about 1,800 sites have been updated, leaving roughly 8,000 still vulnerable. Security experts urge all users to update immediately to protect against potential attacks and maintain website integrity.