July Patch Tuesday only feels endless
Microsoft on Tuesday released 575 patches affecting 29 product families. Sixty-three of the addressed issues are considered by Microsoft to...
Microsoft
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
Ravie LakshmananJul 21, 2026Vulnerability / Web Security A third SharePoint Server flaw patched by Microsoft as part of its Patch...
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions...
Microsoft’s ‘Project Perception’ Could Challenge Anthropic’s Mythos in AI Security
Microsoft is reportedly preparing a new security product, called Project Perception, that would work similarly to Anthropic’s Mythos, deployed within...
Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts
New phishing kits beat Microsoft’s MFA at its own game. Researchers at cybersecurity company ReliaQuest have uncovered two phishing toolkits,...
Microsoft Fixes Record 570 Security Flaws in Biggest Patch Tuesday Ever
The bug apocalypse has officially descended upon Redmond. Microsoft’s July 2026 Patch Tuesday fixes a record 570 security vulnerabilities, including...
Microsoft Urges Windows 11 Users to Install Updates Within Three Days
Microsoft warns attackers are increasingly using AI to accelerate exploitation of newly disclosed vulnerabilities, shrinking the time organizations have to...
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already...
Microsoft Patches a Record 570 Security Flaws
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other...
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after...
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with...
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not...
Windows 11 Cleanup Guide: 9 Ways to Make Your PC Feel Faster
A slow Windows 11 PC does not always need replacing. Sometimes it just needs a little housekeeping. Over time, startup...
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between...
Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
