The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools, ScubaGear and ScubaGoggles, to help organizations identify insecure…
Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’…
Microsoft released emergency out-of-band security updates addressing four vulnerabilities across .NET, including a Brotli buffer overflow and incomplete fixes from…
Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential…
Microsoft has issued a warning about the risks posed by AI agents that access enterprise systems, especially when attackers manipulate…
Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single…
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise…
Microsoft is enhancing Teams security with a new feature that detects malicious URLs hidden in QR codes and alerts recipients…
Microsoft is urging enterprises to prepare for post-quantum authentication by testing certificate dependencies before attempting broad infrastructure migration. Its Post-Quantum…
Microsoft Teams will support third-party detection of synthetic audio and video, allowing organizations to identify potentially AI-generated or manipulated media…