Tag: microsoft
781 articles
Microsoft Bolsters Windows Defenses Against Malicious Remote Desktop Files
Microsoft is stepping up its game to protect Windows users from phishing attacks that hide in plain sight as Remote Desktop files. The tech giant is introducing on-screen warnings and stricter default settings to help shield you from malicious .rdp files.
Microsoft Patch Tuesday Addresses 165 Vulnerabilities, Including Exploited SharePoint Flaw
Microsoft's April Patch Tuesday update is a doozy, addressing a whopping 165 vulnerabilities, including a SharePoint Server spoofing flaw that's already been exploited in the wild. This mega update also fixes a bug that was publicly disclosed by a frustrated researcher.
Microsoft Patch Tuesday Addresses 167 Vulnerabilities, Fixes 2 Zero-Day Flaws
Microsoft's April Patch Tuesday update is a doozy, tackling a whopping 167 vulnerabilities, including two zero-day flaws that demand immediate attention. The question is, can you afford to wait - or do you need to act fast to safeguard your organization?
Microsoft Bolsters Windows 11 Defenses with Latest Cumulative Updates
Microsoft just dropped two new cumulative updates, KB5083769 and KB5082052, for Windows 11, packing security fixes, bug solutions, and fresh features to keep your system safe and running smoothly. These updates cover various builds, including 25H2, 24H2, and 23H2, giving you more reasons to hit install and breathe easy.
Microsoft Fixes Zero-Days with Windows 10 Extended Security Update
Microsoft just dropped a critical Windows 10 update, KB5082200, that bundles essential fixes, including two zero-day vulnerabilities, ahead of the April 2026 Patch Tuesday cycle. This extended security update is a must-have for Windows 10 users, addressing urgent security gaps that need immediate attention.
Microsoft Expedites Reinstation for Suspended Windows Hardware Dev Accounts
Microsoft has introduced a fast-track process to help hardware developers regain access to their suspended Windows Hardware Program accounts, following an outpouring of complaints from developers who were unexpectedly locked out. This swift response aims to get developers back on track, quickly and easily.
CISA Catalog Exposes Actively Exploited Flaws in Fortinet, Microsoft, Adobe Software
The US Cybersecurity and Infrastructure Security Agency (CISA) has just added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that flaws in Fortinet, Microsoft, and Adobe software are being actively exploited by hackers. Is your system exposed - and what can you do to protect it?
VENOM Phishing Attacks Target C-Suite Microsoft Logins
A new phishing-as-a-service platform called VENOM is making it alarmingly easy for hackers to target senior executives, specifically seeking their Microsoft logins. This compact toolkit is putting the keys to the corner office within reach of any motivated adversary, leaving security teams scrambling to respond.
Microsoft Cloud Security Falls Short in Government Review
A scathing government review has revealed that Microsoft's cloud security documentation is woefully inadequate, leaving evaluators with a disturbing lack of confidence in the system's overall security posture. This shocking finding raises serious concerns about the reliability of one of Microsoft's largest cloud offerings.
Microsoft Cloud Security Review Exposes Gaps in Protection
A scathing internal government review of Microsoft's cloud security offering revealed alarming gaps in protection, with evaluators unable to determine whether sensitive information was safe as it moved across servers. The review team was left frustrated by a lack of proper detailed security documentation.
Microsoft Abruptly Bans Top Open-Source Developers
Imagine being a leading open-source developer, only to be suddenly and silently locked out of your Microsoft developer account, with no warning, no emails, and no human contact - just automated blocks and a lengthy appeal wait. This is what recently happened to the creators of VeraCrypt and WireGuard, leaving their critical projects in limbo.
Microsoft Disrupts Open-Source Projects with Sudden Account Suspensions
Microsoft's sudden suspension of developer accounts has left maintainers of popular open-source projects locked out, unable to publish crucial security patches and software updates for Windows users. This abrupt move has sparked concern, with many wondering who will keep the digital roof fixed when the people who make the essential tools are shut out.
Microsoft Rethinks Datacenter Design Amid Conflict Zone Threats
Microsoft is rethinking its datacenter design in conflict-prone regions after recent strikes put these critical facilities at risk, sparking concerns about the resilience of the clouds they support. The company's president, Brad Smith, is leading the effort to reevaluate and revamp its approach to building and protecting datacenters in volatile areas.
Microsoft Deploys Fix for Windows Start Menu Search Disruption
Microsoft has swiftly deployed a server-side fix to resolve a frustrating issue that left some Windows 11 23H2 users unable to access the Start Menu search feature. This quick action means you should now be able to search with ease again.
NCSC Warns of Russia's Ongoing Router Exploits
Russia's notorious hackers, Fancy Bear, are exploiting routers to steal passwords and sensitive information, compromising the security of countless individuals and organisations. With around 5,000 devices and 200 organisations already affected, experts warn that this latest threat is one to take seriously.
Microsoft Uncovers Storm-1175's Medusa Ransomware Link
Microsoft just dropped a crucial report linking Storm-1175, a notorious threat actor, to high-velocity Medusa ransomware attacks that exploit flaws in networked systems. This newly uncovered connection raises the alarm for anyone building, defending, or relying on these systems to stay vigilant against Medusa ransomware attacks.
Microsoft Resolves Outlook Email Delivery Bug
Good news for Classic Outlook users on Outlook.com - Microsoft has fixed a frustrating bug that was preventing some users from sending emails, leaving them stuck in the outbox. The issue, now resolved, was affecting a subset of users, but thankfully, it's been successfully remedied.
Windows Zero-Day Exploit Leaked, Enables Instant Admin Access
A disgruntled researcher has leaked working exploit code for a previously unknown Windows vulnerability, dubbed BlueHammer, allowing attackers to instantly gain administrator access to any system. This alarming development comes after the researcher privately submitted the flaw to Microsoft, which had not yet patched the vulnerability.
Microsoft Deprecates Support Tool in Windows Updates
Microsoft just pulled the plug on the Support and Recovery Assistant (SaRA) command-line utility, a trusted tool for diagnosing and repairing Windows systems, from all supported Windows updates as of March 10. This small change could have big operational consequences for users relying on this tool.
Microsoft Ties Medusa Ransomware Gang to Zero-Day Exploits
Meet Storm-1175, a China-based cybercriminal group linked to the notorious Medusa ransomware gang, who's rapidly exploiting vulnerabilities to wreak havoc. This financially motivated group is marrying fast-moving zero-day exploits with Medusa ransomware, leading to a sharp escalation in attacks.
LinkedIn Harvests Browser Data with Secret Chrome Extension Scans
A recent report, dubbed BrowserGate, uncovers LinkedIn's hidden practice of scanning visitors' browsers for installed extensions and harvesting device data, raising serious questions about user privacy. The professional social network reportedly checks for over 6,000 Chrome extensions, leaving users to wonder: what should LinkedIn know about your browser?
LinkedIn Harvests Browser Data with Secret JavaScript Scripts
Did you know that LinkedIn is quietly harvesting browser data, including a list of your installed Chrome extensions, every time you load a page? A recent analysis, dubbed BrowserGate, uncovered the surprising truth behind LinkedIn's use of secret JavaScript scripts to scan visitor browsers.
Microsoft Grapples with Weeks-Long Exchange Online Mailbox Access Disruptions
Weeks of frustrating disruptions have left Outlook mobile and macOS users struggling to access their Exchange Online mailboxes, sparking a flurry of questions about reliability and resolution. Microsoft is actively investigating the issue, but for affected users, the wait for a fix continues.
Microsoft Accelerates Windows 11 Upgrades with Mandatory 25H2 Rollout
Microsoft is taking a bold step by automatically upgrading unmanaged Windows 11 devices running 24H2 Home and Pro editions to the latest 25H2 version, starting this week. This move marks a significant shift in the company's approach to Windows 11 upgrades.