Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Russian state hackers are using a maximum-severity vulnerability in Microsoft Outlook’s Exchange Server to backdoor unpatched machines and steal credentials...
Microsoft
Microsoft doubles down on multi-model AI as it builds a Copilot super app
All of the major AI providers want you to use, and ideally stay within, their super apps, and now Microsoft...
Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
Swati KhandelwalJul 30, 2026Vulnerability / AI Security Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures...
Microsoft Threat Intelligence Portal Retires August 1: 4 Checks Before the Cutoff
Microsoft is closing the legacy Microsoft Threat Intelligence portal on August 1, leaving security teams only days to verify that...
Long-Lived Vulnerability in Microsoft Secure Boot
Long-Lived Vulnerability in Microsoft Secure Boot Microsoft’s Secure Boot has had a serious vulnerability for most of its existence. An...
Chaos in Teams vishing
Sophos analysts investigated a Microsoft Teams voice phishing (vishing) campaign tracked as STAC4749 that used a consistent set of IT-themed...
Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out
“Attackers have frontier AI. Defenders need a frontier AI ecosystem.” Nvidia CEO Jensen Huang issued the warning on X as...
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and...
Email threats changed after the Tycoon2FA take-down
The adaptation came in the form of using Microsoft Teams as a social engineering channel. Attackers established conversations to build...
Windows 11 Security Cheat Sheet: BitLocker, Passkeys, and Defender Explained
Windows 11 comes with plenty of built-in security tools, but figuring out what each one does can be confusing. BitLocker...
July Patch Tuesday only feels endless
Microsoft on Tuesday released 575 patches affecting 29 product families. Sixty-three of the addressed issues are considered by Microsoft to...
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
Ravie LakshmananJul 21, 2026Vulnerability / Web Security A third SharePoint Server flaw patched by Microsoft as part of its Patch...
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions...
Microsoft’s ‘Project Perception’ Could Challenge Anthropic’s Mythos in AI Security
Microsoft is reportedly preparing a new security product, called Project Perception, that would work similarly to Anthropic’s Mythos, deployed within...
Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts
New phishing kits beat Microsoft’s MFA at its own game. Researchers at cybersecurity company ReliaQuest have uncovered two phishing toolkits,...
