Tag: microsoft
781 articles
Microsoft Confirms Active Exploitation of Windows Shell Flaw
Microsoft warns of a high-severity Windows Shell flaw that's being actively exploited by attackers, allowing them to spoof victims over a network by simply sending a malicious file to be executed. The vulnerability, patched in April's Patch Tuesday update, poses a significant threat to users if left unprotected.
Microsoft Fixes Entra ID Flaw That Enabled Service Principal Takeovers
Microsoft has patched a vulnerability in Entra ID that allowed hackers to hijack service principals, potentially leading to full takeover of sensitive systems. A security researcher discovered the flaw, which stemmed from overly broad permissions in the Agent ID Administrator role.
Microsoft Probes Outlook.com Outage as Sign-in Failures Mount
Microsoft is investigating an Outlook.com outage that's causing sign-in failures and unexpected sign-outs for some users, citing possible issues with client sign-in scenarios. The company is working to identify the root cause, but hasn't yet shared details on the number of affected users or regions.
Microsoft Adds Pause Option to Windows Updates
Microsoft is putting you in the driver's seat with its latest update: you can now pause Windows Updates for a longer period, giving you more control over when and how you update your system. This new feature is a direct result of your feedback, and it's designed to minimize disruptions caused by untimely updates.
Microsoft Overhauls Windows Insider Program to Address Reliability Concerns
Microsoft has heard your frustration loud and clear: the unpredictable rollout of new features in the Windows Insider Program has left many testers feeling confused and left behind. The company is now shaking things up to bring simplicity and reliability back to the program.
Microsoft Revamps Windows Update to Curb Disruptive Restarts
Microsoft is shaking up its Windows Update process to put you in the driver's seat, giving you more control over when updates happen and minimizing those pesky, disruptive restarts. The change comes after hearing from thousands of users, with 7,621 verbatims, about the need for a smoother update experience.
Microsoft Update Disrupts Remote Desktop Security Warnings
Microsoft's latest update aimed at boosting Remote Desktop security may have an unintended consequence: a display-scaling bug that makes crucial security warnings hard to read or even unreadable. This glitch comes at a critical time, as the update was designed to protect against phishing attacks that exploit .rdp files.
Flaws in Hybrid Cloud Tools Expose Dual Attack Surfaces
Researchers have uncovered four vulnerabilities in Microsoft's Windows Admin Center, exposing a dual attack surface in hybrid cloud tools that may be flying under your radar. If left unmonitored, this unmanaged attack surface can leave your organization vulnerable to potential threats.
Microsoft Fixes ASP.NET Core Bug That Enables Privilege Escalation
Microsoft just patched a critical bug in ASP.NET Core that could let hackers escalate their privileges and take control - and they've already released an out-of-band update to fix it. The flaw, tracked as CVE-2026-40372, carries a near-perfect CVSS score of 9.1, indicating a high severity threat.
Microsoft Disrupts ASP.NET Flaw Allowing SYSTEM Privilege Escalation
Microsoft has patched a critical ASP.NET Core vulnerability, CVE-2026-40372, that allowed unauthenticated attackers to forge authentication cookies and gain SYSTEM privileges on affected devices. This fix addresses a flaw in the ASP.NET Core Data Protection cryptographic APIs that could be exploited for privilege escalation.
Microsoft Issues Emergency Update to Fix Windows Server Restart Loop
Microsoft has released an emergency update to fix a critical issue causing some Windows Server devices to get stuck in a restart loop after a recent update. This out-of-band update aims to quickly resolve the problem and prevent further disruptions.
Microsoft Bolsters Windows Explorer with Speed and Performance Upgrades
Microsoft is testing a game-changing upgrade to File Explorer, making it noticeably faster and more efficient, and you could be one of the first to experience it. The tech giant is rolling out launch speed and performance improvements to Windows 11 Insider participants.
Microsoft Fixes Windows Server Issues with Emergency Updates
Microsoft has released emergency updates to fix critical issues with Windows Server systems that arose after installing the April 2026 security updates, ensuring administrators can safeguard their systems without worrying about unexpected server trouble. These out-of-band updates provide a swift remedy for problems introduced by the routine security patches.
Microsoft patches trigger reboot loops in some Windows servers
Microsoft's latest security updates have caused some Windows servers to malfunction, triggering frustrating reboot loops that can bring entire authentication backbones to a grinding halt. This unexpected issue raises serious concerns about the reliability of enterprise updates.
Microsoft Defender Zero-Day Exploit Grants SYSTEM Privileges
A security researcher, known as Chaotic Eclipse, has taken a bold stand against Microsoft's approach to working with cybersecurity experts by releasing a proof-of-concept exploit, dubbed RedSun, that grants SYSTEM privileges and exposes a zero-day vulnerability in Microsoft Defender. This dramatic move sparks renewed debate about disclosure, access, and the complex relationship between researchers and tech giants.
Microsoft Offers Lifeline for Laggard Exchange, Skype Customers
Microsoft is throwing a lifeline to organizations still relying on outdated Exchange Server and Skype for Business Server, offering extended security updates for a fee to help bridge the gap to newer products. This move acknowledges that some businesses need more time to migrate, providing a temporary safety net for those lagging behind.
Microsoft Probes Installation Failures in Latest Windows Server 2025 Update
Microsoft is investigating a frustrating issue with its latest security update, KB5082063, which may refuse to install on some Windows Server 2025 systems, despite being designed to protect them. The company is working to resolve the installation failures and ensure a smooth update experience.
Microsoft Awards $2.3M for Cloud and AI Flaws Uncovered in Zero Day Quest Hacking Contest
Microsoft just took a bold step towards securing our digital future by awarding $2.3 million to researchers who uncovered critical cloud and AI flaws in its Zero Day Quest hacking contest, showcasing the power of incentive-driven vulnerability discovery. Nearly 700 submissions poured in, highlighting the vast scope of potential weaknesses in our rapidly evolving tech landscape.
SAP Vulnerability Exposes High-Risk Data Breach Potential
A single flaw in widely-used business software can be devastating - and April's Patch Tuesday just revealed a critical SAP vulnerability with an alarmingly high severity score, exposing high-risk data breach potential. This pressing issue demands attention from vendors and security experts alike.
Microsoft Resolves Bug Driving Unplanned Windows Server Upgrades
Microsoft has squashed a bug that was causing Windows Server 2019 and 2022 machines to unexpectedly upgrade to Windows Server 2025 without admin consent, and has restored control to IT teams. The fix brings relief to organizations that value control over their server upgrades.
Microsoft Patch Tuesday Update Rectifies Zero-Day Flaws
This April's Patch Tuesday update from Microsoft is a critical one, bundling fixes for not one, but two zero-day flaws alongside over 160 other vulnerabilities, giving organizations and users a pressing decision: apply quickly or risk potential disruptions. By applying these patches, you can significantly reduce your exposure to cyber threats.
Microsoft Patch Tuesday Disrupts 169 Vulnerabilities, Including Exploited SharePoint Flaw
Microsoft's latest Patch Tuesday update is a doozy, addressing a record 169 security flaws across its product lineup - including a critical SharePoint zero-day that's already being exploited in the wild. With nearly 9 out of 10 fixes rated as Important or Critical, organizations are under pressure to patch quickly and avoid leaving themselves vulnerable.
Microsoft Discloses Actively Exploited Zero-Day Flaw in SharePoint
Microsoft just revealed a critical vulnerability in SharePoint that's being actively exploited by attackers, allowing them to access and modify sensitive information. Patch now to protect your organization from potential breaches.
Microsoft Rushes Fixes for 167 Vulnerabilities Amid Zero-Day Exploits
Microsoft just rolled out urgent Patch Tuesday fixes for a whopping 167 vulnerabilities in Windows and related software, including zero-day exploits in SharePoint Server and Windows Defender. But with threats evolving at breakneck speed, can patches keep up to protect our increasingly software-reliant lives?