Microsoft

Meta and Microsoft Reduce Internal Use of Claude AI

Meta and Microsoft are reducing employee reliance on Anthropic's Claude AI while promoting their own coding assistants, according to an…

1 month ago

Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940

Microsoft has released a revised security update package for on-premises Exchange Server, dated September 2026, which includes a fix for…

1 month ago

Windows 11 26H2 Enables Settings Backup by Default for Eligible Devices

Microsoft has automatically enabled Windows settings backup for eligible commercial devices running Windows 11, version 26H2. Microsoft positions this capability…

1 month ago

Hackers Target 5,700 Microsoft 365 Accounts Using Forgotten Service Accounts With No MFA

Threat actors have targeted more than 5,700 Microsoft 365 accounts across 28 tenants in a password-spraying campaign that successfully breached…

1 month ago

Microsoft Tracks NeedyMantis Malware Targeting Telecoms and Government Contractors

Microsoft Threat Intelligence has discovered NeedyMantis, a modular post-compromise malware framework that targets specific industries, including telecommunications firms, government contractors,…

1 month ago

Microsoft Entra TrustSink Attack Uses Rogue MFA Provider to Steal Passwords

TrustSink, a post-compromise credential-phishing technique that abuses Microsoft Entra External Authentication Methods (EAMs) to place a rogue password prompt inside…

1 month ago

Microsoft to Disable SMS as Primary Entra ID Sign-In Method in 2027

Microsoft will turn off SMS as a primary sign-in method for Microsoft Entra ID workforce tenants on February 1, 2027,…

1 month ago

Hackers Abuse Microsoft Teams to Pose as IT Support and Steal Employee Passwords

Threat actors are increasingly abusing Microsoft Teams' external chat capabilities to impersonate corporate IT help desks. They trick employees into…

2 months ago

Microsoft Offers $60,000 Bounty for Critical Cross-Tenant Vulnerabilities

Microsoft has expanded its incentives for security researchers focusing on Dynamics 365 and Power Platform, offering rewards ranging from $1,250…

2 months ago

Hackers Pose as IT Support to Hijack Microsoft 365 Accounts With Fake Passkey Alerts

Threat actors are impersonating corporate IT helpdesk staff in an active social-engineering campaign that hijacks Microsoft 365 identities, establishes MFA…

2 months ago