By continuing to use the site or forum, you agree to the use of cookies, find out more by reading our GDPR policy

Microsoft might be adding an Office app key to physical keyboards for Windows 10 PCs or laptops. In addition to the Windows key, the future keyboards from Redmond may also come with a dedicated Office key that will let you access Microsoft’s Office suite and associated shortcuts. Like the Windows key, a dedicated Office key may help users quickly launch the productivity suite. An internal survey about Office key was also spotted online to determine the usefulness of an Office key on PC keyboards. The idea hasn’t been finalized yet and Microsoft’s form is gathering suggestions or feedback from users. The feedback form is for users (?employees) who have experimented with keyboards that have a dedicated Office key. Microsoft has also included a concept image of the key on a keyboard. As per the concept render, the Office key would be located next to the alt key on the left side. If such a key is introduced, the new layout of the keyboards could be – Windows Key, Alt, Office key and Space bar. The form, which is part of an internal survey at Microsoft, also gives us a little bit of insight into the new keyboard key. The Office key would introduce new shortcuts on Windows and you’ll be able to launch a particular Office app with a keyboard combo. For instance, Office Key + W and Office Key + P will launch Microsoft Word and PowerPoint respectively. If the idea is brought to production, the manufacturers have to dedicate more space to integrate this button into the existing keyboard layout. Get a better perspective by visiting OUR FORUM.

Microsoft issued a warning over the weekend about an active Linux worm that is targeting a recently disclosed Linux Exim mail server vulnerability. Though existing mitigations exist to block the worm functionality of this infection, Microsoft states that Azure servers can still be infected or hacked through this vulnerability. Exim is a very popular mail server software, or message transfer agent (MTA), that is used to send and receive an email for its users. Recently, the CVE-2019-10149 vulnerability was discovered in Exim 4.87 to 4.91 that allows attackers to remotely execute commands on a vulnerable server. Last week, Amit Serper of CyberReason discovered an active worm utilizing this vulnerability to infect Linux servers running Exim with cryptocurrency miners. The worm would then utilize the infected server to search for other vulnerable hosts to infect. In an article posted Saturday, the Microsoft Security Response Center (MSRC) confirms that they have detected this worm targeting Azure customers. "This week, MSRC confirmed the presence of an active Linux worm leveraging a critical Remote Code Execution (RCE) vulnerability, CVE-2019-10149, in Linux Exim email servers running Exim version 4.87 to 4.91," stated a blog post by  JR Aquino, a Microsoft manager in Azure Incident Response. "Azure customers running VMs with Exim 4.92 are not affected by this vulnerability," Microsoft warns, though, that even though the worm functionality is being mitigated, it does not mean that vulnerable Azure server is protected from the remote code execution vulnerability and could still be infected or hacked. Complete details are posted on OUR FORUM.

Three U.S. universities have disclosed data breach incidents impacting personally identifiable information of students or employees following unauthorized access to some of their employees' email accounts. All three universities — Graceland University, Oregon State University, and Missouri Southern State University — have notified the individuals whose personal information was potentially stolen or accessed about the security incidents. In addition, no evidence has been found of the impacted personal information being stolen or used in a malicious manner while investigating the disclosed data privacy incidents involving all three universities. As the university discovered during the breach investigation, "the personal information of some people who had interacted with these email accounts over the past several years was available during the time the unauthorized user(s) had access." As the university discovered during the breach investigation, "the personal information of some people who had interacted with these email accounts over the past several years was available during the time the unauthorized user(s) had access." After analyzing the contents of the impacted Office 365 accounts, MSSU found that the emails contained within stored "first and last names, dates of birth, home addresses, email addresses, telephone numbers, and social security numbers." We have named all 3 universities and have their comments posted on OUR FORUM.