#microsoft
-
Microsoft’s X Account Hijacked for a Clippy Crypto Pump-and-Dump
Microsoft’s official X account, with over 13 million followers, was commandeered to promote a crypto token in an apparent pump-and-dump scheme.
-
Attackers Weaponize Zimbra Flaw to Plant Web Shells and Steal Auth Secrets
Microsoft reports that attackers exploited an already-patched Zimbra Collaboration Suite flaw to deploy web shells, read mailboxes, and harvest server-wide authentication secrets.
-
WSL gains support for Linux containers
Microsoft has made WSL Containers generally available: the Windows Subsystem for Linux can now build and run Linux containers directly, without a separate stack.
-
Windows 11 26H2 is here: a big update you'll barely notice
Microsoft has begun rolling out the annual Windows 11 26H2 update, but users are unlikely to spot much new: the OS has long lived on a shared servicing branch.
-
US Sanctions Push the Netherlands Off Microsoft and Toward NixOS
After sanctions against the International Criminal Court cut its prosecutor off from Microsoft services, the Dutch government began building its own NixOS-based work environment.
-
JADEPUFFER-Linked Attackers Wiped Azure Resources via Compromised Service Principals
Microsoft has detailed a destructive cloud attack that unfolded over 18 hours in an Azure environment using two stolen service principals. The company ties it to the JADEPUFFER threat actor and calls it an evolution of its tradecraft.
-
Microsoft pauses KB5002907 update after it deactivates Office licenses
After the KB5002907 update, perpetual copies of Office 2016 and Office 2019 began showing up as unlicensed — and in some cases vanished entirely. Microsoft has paused the rollout and is investigating.
-
Microsoft unveils Copilot 'super app' and likens it to Office
Microsoft has officially launched its redesigned Copilot, folding chat, app-building and agents into one interface, and claims it will define the AI era the way Office defined the PC era.
-
Microsoft is quietly retiring the ‘Copilot Plus PC’ brand
Two and a half years after its splashy debut, Microsoft and Qualcomm are all but admitting that the ‘Copilot Plus PC’ label is dead.
-
September Windows updates break Always On VPN connections
Microsoft has warned that installing the September 2026 Windows 11 security updates may disrupt the enterprise Always On VPN remote access solution.
-
Microsoft disrupts AI-assisted platform behind 12,000 compromised accounts
Microsoft says it has taken down EvilTokens, a service that offered attackers a ready-made platform for mass account compromises.
-
Microsoft Patches Azure AI Foundry Flaw With Maximum CVSS Score of 10.0
A critical hole has been found in the Azure AI Foundry platform that let an unauthenticated attacker elevate privileges over the network. Microsoft has already fixed the issue on its end — no customer action is required.
-
Internal Microsoft Documents: AI Training Called “the Largest Theft of Labor in History”
Newly unsealed materials from The New York Times' lawsuit against OpenAI and Microsoft reveal that the companies' top executives, in private correspondence, called data collection “theft” and their own products an “existential threat” to publishers.
-
Microsoft Ships Emergency Fix for Its Record-Breaking September Windows 11 Patch
The largest set of fixes in the company's history closed nearly a thousand vulnerabilities — and broke some features at the same time. An out-of-band update had to be rushed out.
-
Microsoft Ships Emergency Patches to Fix Remote Desktop Failures
Out-of-band Windows updates fix the Remote Desktop Services outages caused by the September patches, along with problems affecting Hyper-V and USB audio.
-
Microsoft issues a “code of conduct” for AI: don’t hack systems and don’t deceive people
Microsoft has published a set of rules laying out the values and “red lines” for its own AI models — amid the industry’s growing focus on safety and control.
-
LinkedIn Wins “BrowserGate” Case Over Scanning Browser Extensions
A federal court in California has dismissed two class-action lawsuits against LinkedIn: the plaintiffs failed to prove that their privacy had been violated at all.
-
Rust Gains Tier-1 Language Status at Microsoft
The Rust Foundation has announced that Microsoft has officially recognized the Rust language as a tier-1 language.
-
Microsoft Patches Nearly a Thousand Vulnerabilities in a Single Month — a New Record
Microsoft's September update bundle fixed no fewer than 974 vulnerabilities — the largest in the company's history. AI is speeding up the hunt for holes, but administrators can no longer keep up with testing and deploying the fixes.
-
Windows Server 2025 crashes apps over memory-management changes
Microsoft has warned that new memory-management mechanisms in Windows Server 2025 are crashing applications that use Address Windowing Extensions — SQL Server in particular. There is no permanent fix yet.
- More