Tag: microsoft
781 articles
Microsoft Update Disrupts NTLM Networking
Microsoft's latest update has shaken up NTLM networking, changing how Windows handles NTLMv1-derived Single Sign-On credentials and shifting the default behavior of the BlockNtlmSSO registry control. Network admins, take note: your security settings may need an urgent review.
Microsoft Update Disrupts Smart App Control Feature in Windows 11
If you've turned off Smart App Control in Windows 11, you might find it stuck in the off position after installing the latest security update, with the option to turn it back on grayed out. Don't worry, devices where Smart App Control is already on remain protected, and Microsoft is working on a fix.
Microsoft Winds Down Support for Windows Server 2022
Microsoft just announced that Windows Server 2022 has reached the end of its mainstream support phase, transitioning to extended support as of October 13, 2026. This means the October 2026 security update will be the last major update for this version.
Microsoft Disrupts Global Phishing Network Behind 1 Billion Messages
Microsoft and Japanese police have joined forces to take down a notorious phishing network, known as Yam Store or Storm-3119, that was responsible for a staggering 1 billion phishing emails and texts sent to over 75,000 organizations since January 2026. This underground marketplace was selling compromised accounts, licenses, and storage to threat actors, fueling a massive wave of cyber scams.
Microsoft Fixes Windows Bug Behind Black Screens, Explorer Crashes
Microsoft has squashed a pesky Windows bug that caused black screens and Explorer crashes, and it's already included the fix in updates released since October 13, 2026 - so be sure to get the latest update to keep your device running smoothly!
Microsoft Disrupts Vast Chinese-Language Phishing Kit Network
Microsoft swooped in to dismantle a massive Chinese-language phishing kit network that had been bombarding over 75,000 organizations worldwide with a staggering 1 billion+ emails and SMS messages since January. The campaigns, tracked as Storm-2990, were fueled by a commercial ecosystem of customizable phishing kits.
Microsoft Discloses 1,413 Vulnerabilities, Including Actively Exploited Zero-Day
Microsoft just revealed a staggering 1,413 vulnerabilities in its October 2026 Patch Tuesday update, shattering its previous record of 1,261 set in 2020. Among these defects is a particularly concerning actively exploited zero-day flaw in Windows Shell, CVE-2026-96951.
Microsoft Disrupts Phishing Kits Behind 1 Billion Scam Messages
Microsoft and its partners have struck a major blow against cybercrime, disrupting three notorious phishing kits responsible for over 1 billion scam messages sent to 75,000 organizations worldwide. This significant takedown targets the tools behind a massive phishing operation.
Microsoft Resolves VPN Issues Tied to September Windows Updates
Microsoft has released two new cumulative updates, KB5127648 and KB5127646, to fix a frustrating VPN issue affecting Windows 11 users who installed September's updates, which could leave connections stuck in a "Connecting" state or fail to connect altogether. These updates should now keep your Always On VPN connections stable and secure.
Law Enforcement Disrupts Phishing Network Behind 1 Billion Malicious Messages
A massive phishing network responsible for sending over 1 billion malicious messages to 75,000 organizations in 150 countries has been disrupted by law enforcement, bringing relief to countless individuals and businesses worldwide. This enormous operation had been targeting victims with sophisticated device-code phishing scams, with over 750 million messages aimed specifically at Microsoft customers.
Windows Updates Disrupt Remote Desktop Connections
Recent Windows updates are causing a headache for remote workers, with Remote Desktop connections failing due to a compatibility issue when Administrator protection is enabled. This frustrating error, marked as 0xC000000D, prevents non-administrator users from connecting to devices, leaving teams stuck.
Microsoft Discloses Record 1411 CVEs in October Patch Update
Microsoft just dropped a record-breaking 1,411 security updates in its October Patch Tuesday release, outpacing the total number of fixes issued in all of 2025. This massive haul was made possible by the company's new AI-driven scanning tools that supercharge vulnerability detection.
Microsoft Discloses Over 1,400 Security Flaws in Record Patch Update
Microsoft just dropped a record-breaking patch update, fixing over 1,400 security vulnerabilities in Windows and other software - that's roughly ten times its usual monthly output! This massive update surpasses the previous record, and brings the year's total discovered vulnerabilities to over 4,000.
Researchers Bypass Windows SmartScreen Enclave with Four-Byte Write Bug
Microsoft's Windows SmartScreen enclave, designed to provide an extra layer of security, was surprisingly vulnerable to a clever exploit that allowed researchers to run attacker-controlled code inside it. A tiny four-byte write bug was all it took for security firm Doyensec to bypass the enclave's defenses and execute code within it.
Microsoft Disrupts 1,413 Vulnerabilities, Fixes Exploited Windows Shell Bug
Microsoft just dropped a record-breaking Patch Tuesday update, tackling a whopping 1,413 vulnerabilities - and yes, that includes a critical Windows Shell bug that's already being exploited. This massive release underscores a new normal in cybersecurity: hundreds of fixes are no longer an exception, but the baseline.
Microsoft Bolsters Windows 10 with KB5126657 Security Update
Microsoft just dropped a crucial security update, KB5126657, for Windows 10, packing fixes for a whopping 1,411 vulnerabilities, including an actively exploited zero-day flaw. This update is a must-install for all Windows 10 users, especially those running Enterprise LTSC or enrolled in the program.
Microsoft Patch Tuesday Disrupts 1,411 Flaws, Zero-Day Exploits
Microsoft's October Patch Tuesday update is a doozy, tackling a staggering 1,411 vulnerabilities in one fell swoop! This record-breaking release includes fixes for a massive number of flaws across the company's software portfolio.
Microsoft Winds Down Support for Windows 11 24H2 Editions
Microsoft just announced that Windows 11 24H2 Home and Pro editions, along with Windows 10 Enterprise LTSB 2016, have reached their end of support, meaning they won't receive any further security or non-security updates after October 2026. It's time to consider upgrading to stay protected!
Microsoft Releases Mandatory Windows 11 Updates to Fix Hundreds of Vulnerabilities
Microsoft just dropped some crucial updates for Windows 11, tackling hundreds of vulnerabilities with its October 2026 Patch Tuesday release - and they're mandatory, so you'll want to grab them ASAP! Simply head to Settings > Windows Update and click "Check for Updates" to get the fixes.
Microsoft Warns Windows 11 23H2 Users of Impending Security Update Cutoff
Don't wait until it's too late: if you're using Windows 11 23H2 Enterprise, Education, or IoT Enterprise editions, you'll stop receiving crucial security updates after next month, leaving your devices vulnerable to the latest threats. Make the switch to a supported release, like Windows 11 26H2, to stay protected.
Norway Fines Microsoft's Xandr $9.6 Million Over Grindr Data Misuse
Norway's Data Protection Authority slapped Xandr, a Microsoft advertising arm, with a whopping $9.6 million fine for recklessly sharing Grindr user data without consent. The massive penalty reflects the severity of the breach, which put thousands of Norwegian users' sensitive information at risk.
Microsoft Warns of Security Update Cutoff for Outdated Windows Devices
Don't wait until it's too late: if you're running an outdated version of Windows, you'll lose access to crucial security updates after May 17 and June 19, 2027, when key certificates expire. Upgrade to a supported version now to stay protected.
Microsoft Warns of ClickFix Attack Hiding VBScript in Browser Cache
Beware of the sneaky ClickFix attack, where hackers hide a malicious VBScript payload in your browser cache, disguising it as an innocent image - and Microsoft is sounding the alarm. A clever trick allows attackers to get a head start, loading the script into your cache before you even take action.
Microsoft Warns of ClickFix Browser Cache Smuggling Attacks Bypassing Windows Defenses
Microsoft warns of a sneaky new attack called ClickFix browser cache smuggling, where hackers disguise malicious scripts as harmless image files in your browser cache, allowing them to bypass Windows defenses. This clever trick lets attackers execute their payload without downloading or executing remote files in real time.