The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
While security breaches are common, the latest report relates to the tech giant Microsoft. Reportedly, Microsoft has disclosed a securityMicrosoft Disclose a S…
This week, Microsoft has released the first security updates of 2020. With Patch Tuesday January updates, Microsoft has rolled outMicrosoft Patch Tuesday Janua…
Abusing Microsofts login page is becoming increasingly popular among scammers. We have recently heard of numerous phishing scams exploiting MicrosoftThis Micro…
Following Google, the other tech giant Microsoft also seems busy making privacy updates in its browser. As revealed recently, MicrosoftMicrosoft Edge Will Soon…
Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume…
Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Ou…
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not th…
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certi…
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a se…
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in …
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out …
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild.The former, tracked…
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a cust…
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a cust…
Cybersecurity researchers have discovered what they said is the first known malicious Microsoft Outlook add-in detected in the wild.In this unusual supply chai…
Cybersecurity researchers have disclosed details of a new attack method dubbed Reprompt that could allow bad actors to exfiltrate sensitive data from artificia…
Microsoft has rolled out a huge Patch Tuesday update bundle for October 2025, addressing 175…Microsoft October Patch Tuesday Is Huge With 170+ Fixes on Latest …
Microsoft recently announced changes to the Internet Explorer mode in Edge browsers, citing zero-day exploits…Microsoft Limits IE Mode In Edge Browser Citing Z…
Microsoft on Thursday disclosed that it revoked more than 200 certificates used by a threat actor it tracks as Vanilla Tempest to fraudulently sign malicious b…
Microsoft has released the scheduled Patch Tuesday updates for September 2025, addressing 81 security vulnerabilities…Microsoft Fixed 2 Zero-Days Amid 80+ Patc…
U.S. Senator Ron Wyden has called on the Federal Trade Commission (FTC) to probe Microsoft and hold it responsible for what he called "gross cybersecurity negl…
Microsoft has released the scheduled Patch Tuesday updates for August 2025. This month’s update bundle…Microsoft Fixed Over 100 Flaws With August 2025 Patch Tu…
Cybersecurity researchers have lifted the lid on the threat actors' exploitation of a now-patched security flaw in Microsoft Windows to deploy the PipeMagic ma…
Microsoft recently announced the launch of Project Ire – a dedicated AI agent for malware…Project Ire – Microsoft Launches AI Agent For Automated Malware Class…