Microsoft

CISA Offers Free Security Tools to Protect Microsoft 365 and Google Workspace From Cyber Threats

The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools, ScubaGear and ScubaGoggles, to help organizations identify insecure…

1 week ago

Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords

Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’…

1 week ago

Microsoft Issues Emergency .NET Security Updates to Fix Four Vulnerabilities

Microsoft released emergency out-of-band security updates addressing four vulnerabilities across .NET, including a Brotli buffer overflow and incomplete fixes from…

2 weeks ago

Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards

Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential…

2 weeks ago

Microsoft Warns AI Agents Can Be Hijacked Through Prompt Injection Attacks

Microsoft has issued a warning about the risks posed by AI agents that access enterprise systems, especially when attackers manipulate…

2 weeks ago

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single…

3 weeks ago

Massive Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days

Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise…

3 weeks ago

Microsoft Teams Adds New Security Feature to Detect Malicious QR Codes in Messages

Microsoft is enhancing Teams security with a new feature that detects malicious URLs hidden in QR codes and alerts recipients…

4 weeks ago

Microsoft Pushes Enterprises to Test Post-Quantum Certificates Before Large-Scale Migration

Microsoft is urging enterprises to prepare for post-quantum authentication by testing certificate dependencies before attempting broad infrastructure migration. Its Post-Quantum…

4 weeks ago

Microsoft Teams to Introduce Deepfake Detection to Identify AI-Generated Audio and Video in Meetings

Microsoft Teams will support third-party detection of synthetic audio and video, allowing organizations to identify potentially AI-generated or manipulated media…

4 weeks ago