#microsoft
-
Bill Gates's “Flame”: How the Microsoft Founder Spent an Hour Fighting to Install Movie Maker
A leaked internal email from 2003, surfaced in court records, shows Bill Gates in the role of an ordinary Windows user — and the ordinary user was thoroughly displeased.
-
Switzerland Begins Its Break from Microsoft: A 3,000-Seat Pilot
Switzerland's federal government has launched a pilot program to replace Microsoft 365 with open-source software. The administration runs more than 54,000 computers in all.
-
The Seattle Times and Newsday sue OpenAI and Microsoft
Two more American publications accuse the AI developers of using their journalistic material to train neural networks. In the suit, generative AI is called “a snake eating its own tail.”
-
ASCII smuggling: invisible Unicode migrates from AI attacks to spam
A trick devised two years ago to sneak instructions into chatbots is now being used en masse by spammers to slip past email filters.
-
Windows 11 to enable memory protection on more devices — at the cost of gaming performance
Microsoft will start turning on memory integrity on eligible devices as soon as next month. The protection works at the kernel level, but on older processors it can lower frame rates in games.
-
Nearly 22,000 Microsoft Exchange Servers Vulnerable to Mail Hijacking
Tens of thousands of unpatched Exchange servers remain exposed online, vulnerable to the CVE-2026-62911 authentication bypass. An exploit is already public, and the most unpatched systems are in the US and Germany.
-
Major Exchange Online Outage: Emails Fail to Arrive, Sign-In Won't Work
Microsoft is investigating an Exchange Online outage that has left tens of thousands of users facing authentication errors, delays and lost messages.
-
TerminalFix: Fake Cloudflare CAPTCHAs Open the Door to Corporate Networks
Microsoft has disclosed a new strain of ClickFix attacks that tricks the user into running a malicious command in Windows Terminal or PowerShell and deploys a reverse tunnel into the victim's network.
-
Paint and Photos quietly tag locally generated images with a server-issued GUID
A reverse engineer discovered that Microsoft Paint and Photos embed an invisible watermark into the pixels of AI images — a unique identifier that betrays a remote prompt-moderation server.
-
Microsoft Killed Free Nonprofit Licenses — and 171,000 Organizations Lost Their Data
A quiet edit to the terms of a grant program turned into a catastrophe for thousands of small nonprofits around the world: they lost their files in OneDrive with no way to recover them.
-
Steve French Steps Down as CIFS/SMB3 Maintainer in the Linux Kernel
With the release of Linux 7.3, leadership of the CIFS/SMB3 subsystem changes hands: its long-standing maintainer, Steve French, is leaving the post for health reasons.
-
Critical Entra ID Vulnerability (CVSS 10.0): Remote Code Execution Already Exploited
Microsoft has disclosed a maximum-severity flaw in its Entra ID cloud identity service that attackers have already exploited. The company insists the vulnerability has been fully remediated and that no action is required from customers.
-
Microsoft Links More Than 30 Domains to the Infrastructure of the MacSync macOS Stealer
Microsoft Defender experts traced the path of the MacSync macOS stealer from payload download to data theft, correlating recurring network and behavioral markers across constantly shifting infrastructure.
-
CISA: Critical Windows IKE Vulnerability Already Exploited in Attacks
The U.S. agency CISA has warned of active exploitation of a critical RCE vulnerability in the IKE service extensions component, affecting all supported versions of Windows.
-
CoSnitch: One Click Steals Data from Copilot Personal
Varonis Threat Labs has disclosed three vulnerabilities in the consumer version of Microsoft Copilot: following a crafted link let attackers silently siphon off emails, files and chat history from connected services. Microsoft shipped a fix on August 18, 2026.
-
CISA: Windows Task Host Vulnerability Now in the Ransomware Playbook
The US agency CISA has confirmed that ransomware groups are exploiting a privilege-escalation vulnerability in the Windows Task Host component. The flaw was patched back in November 2025, but the attacks continue.
-
Microsoft Pulls WMIC from Windows 11 — a Tool Beloved by Hackers
The legendary WMIC command-line utility is vanishing from Windows 11: Microsoft is finishing its removal in versions 24H2 and 25H2, as well as in the latest beta builds. The reason — years of the tool being abused by attackers.
-
Hacker puts 3.6 million employee records from Fortune 500 Azure infrastructure up for sale
An attacker using the alias TheHatman claims to have siphoned employee databases from McDonald's, Vodafone, TCS and other corporations out of their Microsoft Azure tenants using compromised credentials. Some of the companies deny that any breach took place.
-
Microsoft closes the LegacyHive zero-day in Windows
In its August batch of updates, Microsoft fixed a vulnerability in the Windows User Profile Service that allowed local escalation to administrator privileges. The patch arrived a month after the PoC was published.
-
Microsoft is merging its Copilot apps ahead of a “super app”
Microsoft is bringing the consumer and enterprise versions of its Copilot assistant into a single interface — groundwork for the launch of a “super app” promised before the end of the year.
- More