cyber security
Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords
Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’ passwords.
Huntress recorded 497...
Cyber Security News
Microsoft Issues Emergency .NET Security Updates to Fix Four Vulnerabilities
Microsoft released emergency out-of-band security updates addressing four vulnerabilities across .NET, including a Brotli buffer overflow and incomplete fixes from an earlier October release....
Cyber Security News
Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards
Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential rewards.
Announced by the...
Cyber Security News
Microsoft Warns AI Agents Can Be Hijacked Through Prompt Injection Attacks
Microsoft has issued a warning about the risks posed by AI agents that access enterprise systems, especially when attackers manipulate them through methods like...
Cyber Security News
Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet
Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious DFS referral response....
CVE/vulnerability
Massive Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise defenders must address immediately....
Cyber Security News
Microsoft Teams Adds New Security Feature to Detect Malicious QR Codes in Messages
Microsoft is enhancing Teams security with a new feature that detects malicious URLs hidden in QR codes and alerts recipients after they receive messages....
cyber security
Microsoft Pushes Enterprises to Test Post-Quantum Certificates Before Large-Scale Migration
Microsoft is urging enterprises to prepare for post-quantum authentication by testing certificate dependencies before attempting broad infrastructure migration.
Its Post-Quantum Cryptography Transport Layer Security...