Friday, October 23, 2026

Microsoft

Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards

Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential rewards. Announced by the Microsoft Security Response Center (MSRC)...

Microsoft Warns AI Agents Can Be Hijacked Through Prompt Injection Attacks

Microsoft has issued a warning about the risks posed by AI agents that access enterprise systems, especially when attackers manipulate them through methods like...

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious DFS referral response....

Massive Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days

Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise defenders must address immediately....

Microsoft Teams Adds New Security Feature to Detect Malicious QR Codes in Messages

Microsoft is enhancing Teams security with a new feature that detects malicious URLs hidden in QR codes and alerts recipients after they receive messages....

Microsoft Pushes Enterprises to Test Post-Quantum Certificates Before Large-Scale Migration

Microsoft is urging enterprises to prepare for post-quantum authentication by testing certificate dependencies before attempting broad infrastructure migration. Its Post-Quantum Cryptography Transport Layer Security...

Microsoft Teams to Introduce Deepfake Detection to Identify AI-Generated Audio and Video in Meetings

Microsoft Teams will support third-party detection of synthetic audio and video, allowing organizations to identify potentially AI-generated or manipulated media during meetings. Microsoft's roadmap...

Meta and Microsoft Reduce Internal Use of Claude AI

Meta and Microsoft are reducing employee reliance on Anthropic's Claude AI while promoting their own coding assistants, according to an October 5 report by...

Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940

Microsoft has released a revised security update package for on-premises Exchange Server, dated September 2026, which includes a fix for CVE-2026-96940. This V2 release...

Windows 11 26H2 Enables Settings Backup by Default for Eligible Devices

Microsoft has automatically enabled Windows settings backup for eligible commercial devices running Windows 11, version 26H2. Microsoft positions this capability as a vital resilience...

Hackers Target 5,700 Microsoft 365 Accounts Using Forgotten Service Accounts With No MFA

Threat actors have targeted more than 5,700 Microsoft 365 accounts across 28 tenants in a password-spraying campaign that successfully breached seven forgotten service accounts...