#microsoft
-
Microsoft ships out-of-band Windows updates to distrust eMudhra certificates
The KB5134133 and KB5134125 out-of-band updates remove seven certificates tied to eMudhra's compromised certificate authority keys from the Windows trust list. They target systems that don't receive automatic trust list updates.
-
Microsoft Authenticator Flaw on Android Let Permissionless Apps Steal Work Account Tokens
Microsoft has fixed CVE-2026-80097 in Authenticator for Android, which let a malicious app with no permissions pose as Teams and obtain tokens for a work account. Users should update to version 6.2606.4246.
-
Microsoft Offers Buyouts to 60,000 Employees
The company is rolling out a "voluntary exit" program for tens of thousands of workers in the US, UK, Canada, and India, aiming to shrink headcount without another round of layoffs.
-
ARTEX AI Agents Supercharged the ConnectWise Supply Chain Attack
Microsoft has tied the recent ConnectWise cloud compromise to China-aligned Storm-0940, which deployed the agentic AI framework ARTEX to automate attacks at "machine speed."
-
The Netherlands is building its own Linux-based OS to break free from Microsoft
The Netherlands is reportedly developing its own Linux-based operating system in an effort to reduce its reliance on Microsoft products.
-
October Windows Server updates break Exchange sign-in and mail flow
Microsoft has confirmed that this month's Windows Server security updates break Outlook on the web sign-in and leave messages stuck in the Outbox on some Exchange Server systems.
-
Microsoft Ships Defender for the Linux Desktop
Microsoft's Defender anti-threat product now runs on desktop Linux too — the company points to a growing number of developers who pick Linux as their working machine.
-
Global takedown dismantles network behind a billion phishing messages
Law enforcement and tech companies worldwide disrupted a sprawling cybercriminal ecosystem that targeted over 75,000 organizations across 150 countries.
-
Researchers Run Their Own Code Inside a Windows SmartScreen Enclave
In a lab, Doyensec broke the isolation of a VBS enclave that stores the password hash for a Windows anti-phishing feature. Microsoft had already patched the flaw in its September update.
-
Microsoft Patches a Record 1,400-Plus Flaws in a Single Month
Microsoft's October update batch eclipses even September's record of nearly a thousand fixes. The company credits large language models for the flood of discoveries.
-
Norway slaps Microsoft ad unit with $9.6M fine over Grindr data
Norway's data protection authority has issued its largest-ever fine — 92 million kroner — to Xandr for unlawfully sharing sensitive data of Grindr users with thousands of advertisers.
-
Maia 300: Microsoft Bets on Its Own AI Silicon to Cut Nvidia Dependence
Microsoft has unveiled the third generation of its in-house Maia accelerator, meant to become the primary inference system for its products and to reduce its reliance on chips from Nvidia and AMD.
-
Nadella says we should treat every AI model as ‘compromised’
In a lengthy post on X, Microsoft's CEO set out his views on the dangers of highly advanced AI and argued we should treat such models as inherently untrustworthy — with an ‘emergency brake’ always within reach.
-
Microsoft: Outdated Windows Devices Will Stop Getting Security Updates
The company warns that devices running unsupported versions of Windows will stop receiving security updates after next year's planned rotation of Windows Update certificates.
-
US bars Microsoft, Adobe, and major IT firms from skilled-worker green card program
The Trump administration is suspending several tech companies from a permanent-residency program, accusing them of fraud. The list also includes Capgemini, Cognizant, HCL, Infosys, Tata, and Wipro.
-
U.S. Offers Up to $10 Million for Information on HAFNIUM Suspect Zhang Yu
The State Department is willing to pay up to $10 million for information on Chinese national Zhang Yu, charged in the U.S. over the 2021 Microsoft Exchange Server attacks.
-
Microsoft Ships First Release of Its LiteBox Sandboxing Library OS
Microsoft has tagged the first release of LiteBox, an open-source, Rust-based library operating system built for sandboxing applications.
-
Microsoft Unveils New AI-Friendly Hardware and Windows Changes
At its event, Microsoft announced AI-oriented devices and Windows updates — the company promises even more AI, both inside the OS and on the desktop.
-
Microsoft Patches Exchange Server Flaw That Let Users Read Each Other's Mail
Out-of-band updates close CVE-2026-96940 (CVSS 8.8): an authenticated user could reach other mailboxes within the same organization.
-
TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A China-aligned cyber espionage crew is impersonating economists, policymakers and even an Anthropic employee to steal the credentials of experts shaping U.S. AI regulation.
- More