Tag: microsoft
781 articles
Microsoft Update Disrupts Games, Apps With Dolby Digital Audio
If you're experiencing frustrating crashes with your favorite games and apps that use Dolby Digital Audio, you're not alone - a recent Windows 11 update (KB5124010) is causing issues with programs that rely on AC-3 audio decoding. This update can cause apps to fail to launch, shut down unexpectedly, or work fine until certain audio features are used.
Warlock Targets SharePoint Deployments with Ransomware via Exploited Flaws
Warlock, a suspected China-linked threat actor, has launched targeted ransomware attacks on at least four organizations, including critical infrastructure operators, via exploited flaws in on-premises Microsoft SharePoint Server deployments. The victims, located in Portuguese- and Spanish-speaking countries, span across Europe, Africa, and Latin America.
AI Accelerates Cyber Attacks to Minutes, Microsoft Warns
Microsoft warns that AI is supercharging cyber attacks, condensing what once took days into mere minutes - putting defenders on the back foot and giving attackers a disturbing head start. This alarming acceleration is happening during the most critical phases of an attack, including credential discovery, lateral movement, and data exfiltration.
Microsoft X Account Hijacked in Crypto Pump-and-Dump Scam
Microsoft's official X account was hijacked by unknown attackers, who used its 13 million followers to promote a cryptocurrency token in a pump-and-dump scam, prompting the company to apologize and vow to take legal action. The account has since been secured and Microsoft is investigating the incident.
AI Gives Threat Actors Edge in Cyberwar
The AI-powered advantage is currently in the hands of threat actors, and defenders must act swiftly to close the gap before it's too late. Microsoft warns that AI-driven vulnerability research is outpacing the ability to patch flaws, creating a pressing need for defenders to catch up.
Microsoft Warns of Dual-RMM Phishing Attacks Deploying ScreenConnect
Beware of phishing attacks that disguise themselves as legitimate software installs - hackers are using fake filenames to trick you into giving them remote control of your device. Microsoft has uncovered a sneaky campaign that uses a genuine MSP360 installer to gain an initial foothold on affected devices.
Microsoft Bolsters Entra ID Defenses Against Script Injection Attacks
Microsoft is stepping up Entra ID security by blocking external script injections, starting mid-October 2026, to shield users from potential threats during sign-ins. This move will ensure only trusted scripts from Microsoft's content delivery network can run during authentication.
Microsoft Expands WSL with Native Linux Container Support
Microsoft just made it a whole lot easier to work with Linux containers on Windows, introducing a new command-line tool, wslc.exe, that lets you build, run, and deploy containers with ease. You can get started by running wsl --update and using familiar container commands.
Microsoft Rolls Out Windows 11 2026 Update With Familiar Features
Microsoft is rolling out the Windows 11 2026 Update, and the good news is that you won't need a full OS replacement - instead, you'll get a small enablement package that brings new features to your device. This seamless update is all thanks to Microsoft's shared servicing model, which allows for efficient and easy updates.
Microsoft Exposes 17.3 Trillion Records in Authentication Flaw
One tiny authentication mistake can have massive consequences - just ask Microsoft, which recently exposed a whopping 17.3 trillion records due to a flaw that let attackers bypass login credentials. A 16-year-old security researcher discovered the vulnerability, which could have let hackers pose as admins, but thankfully there's no evidence it was exploited.
Microsoft Exposes NeedyMantis Malware Used in Long-Term Network Breaches
Microsoft uncovered a sneaky malware called NeedyMantis that's used to secretly maintain long-term access to compromised networks. This lightweight but persistent threat is designed to fly under the radar, allowing attackers to keep a grip on networks for an extended period.
Microsoft Phases Out Windows Deployment Services
Microsoft is sunsetting Windows Deployment Services, ending active development and planning for its complete removal in a future Windows Server version. This change affects the inbox WDS server role and associated functionality.
Microsoft Updates Trigger Desktop Loading Issues in Windows
If you've installed the latest Windows updates, you might be experiencing desktop loading issues - including frustrating black screens - but don't worry, Microsoft has a simple fix: just install and configure the Group Policy, and restart your device. This solution should get your desktop up and running smoothly again.
Microsoft Releases KB5124010 Update, Bolsters Windows 11 with 46 Fixes
Microsoft just dropped the KB5124010 update, packing it with 46 fixes and tweaks that supercharge Windows 11 with exciting new features, smoother accessibility, and seamless Bluetooth and backup performance. This optional update is a sneak peek at what's to come in next month's Patch Tuesday release, giving you a taste of the improvements ahead.
ClickFix Malware Exploits Legitimate Sites via Clipboard Trickery
Beware of ClickFix malware, a sneaky threat that's taking over 47% of enterprise networks by tricking users into pasting a malicious command into their own systems. It starts with a fake fix for a common problem, quietly copying a malicious command to your clipboard and asking you to paste it into a trusted tool.
Microsoft Fixes File History Backup Bug in Windows Updates
Microsoft's September 2026 security update caused a frustrating problem for some Windows users: File History, a built-in backup feature, stopped working, leaving users unable to create or restore backups. Fortunately, the tech giant has now fixed this bug.
Microsoft Updates Disrupt Always On VPN Connections
If you've configured your Always On VPN to automatically switch connection methods if the initial attempt fails, you may be in for a frustrating surprise after installing the September 2026 Windows 11 security updates. Your VPN connections could get stuck in a perpetual loop, constantly trying and failing to connect.
Rogue MFA Providers Exploit Entra ID for Password Theft
Security researchers have uncovered a sneaky technique called TrustSink that allows rogue MFA providers to swipe plaintext passwords during seemingly normal login attempts, and they've demonstrated it works with Microsoft Entra ID. This alarming exploit lets attackers get their hands on sensitive passwords, complete with timestamps and source IP addresses.
Microsoft Disrupts EvilTokens AI-Powered Phishing Service
Microsoft and its partners have successfully dismantled an AI-powered phishing service, known as EvilTokens, that had compromised over 12,000 email inboxes across 10,000 organizations worldwide. This court-authorized takedown marks a significant win in the fight against cybercrime.
Microsoft Disrupts EvilTokens Cybercrime Service
Microsoft and its partners have successfully dismantled the EvilTokens cybercrime service, seizing 50 websites and disabling over 175 domains used to target and exploit victims. This disruption was made possible through a powerful collaboration with industry leaders, including Cloudflare, OpenAI, and Coinbase, to protect potential victims and take down the operation.
Microsoft Disrupts EvilTokens Phishing Service Targeting 12,000 Accounts
Microsoft's Digital Crimes Unit has struck a major blow against cybercrime, disrupting the EvilTokens phishing service that targeted over 12,000 accounts. Two suspected administrators were arrested in the UK as part of the operation.
SharePoint Flaw Enables Authenticated Remote Code Execution
A newly discovered flaw in SharePoint, initially downplayed by Microsoft as a minor spoofing issue, has been revealed to be a critical vulnerability that allows authenticated attackers to execute remote code, putting systems at risk. This vulnerability, tracked as CVE-2026-65660, has a much higher severity score of 8, underscoring the urgent need for patching.
Microsoft Urges Admins to Migrate Entra ID Users to Phishing-Resistant Auth Methods
Microsoft is sounding the alarm: by February 1, 2027, admins must migrate Entra ID users to phishing-resistant auth methods, as the company will retire SMS and voice authentication, leaving users vulnerable to cyber threats if they don't make the switch.
Microsoft Enhances Teams Security with Custom File Extension Blocking
Microsoft Teams just got a major security boost: admins can now customize file type blocking to shield their organization from malicious threats, giving them more control over what file types are allowed or blocked. This update builds on Teams' built-in safety feature, Weaponizable File Protection, which scans conversations for high-risk file attachments.