#microsoft
-
Azure Linux 3.0.20260809: Over 233 Vulnerability Fixes
Microsoft has released another monthly update to the stable Azure Linux 3.0 branch, bundling an impressive set of security patches.
-
Attacks on SharePoint: Public PoC Fuels Exploitation of an Authentication Bypass
After Rapid7 published a proof-of-concept exploit, attackers began actively exploiting the critical CVE-2026-55040 vulnerability in Microsoft SharePoint, which allows a JWT to be forged and lets an attacker impersonate any user.
-
Researcher Publishes New Windows 0-Day Despite Microsoft's Threats to Sue
A specialist going by the handle Nightmare Eclipse has disclosed ShieldBreak, a Windows Defender vulnerability that allows privileges to be escalated to full control of the system. There is no patch yet.
-
Microsoft Patches 400 Vulnerabilities in August Update, Three of Them Zero-Days
Microsoft's August Patch Tuesday turned out to be record-breaking in scale: 400 fixed vulnerabilities and three zero-days, one of which has already been used by North Korea's Lazarus hackers.
-
Rapid7 uncovers a SharePoint exploit chain with an AI agent
Rapid7 researchers chained an authentication bypass and a remote code execution vulnerability in Microsoft SharePoint to gain access with no account at all. Much of the work was done by an AI agent — which, the company admits, “cheated.”
-
CISA: SharePoint Vulnerability Being Used in Ransomware Attacks
The US agency CISA has confirmed that ransomware groups have begun exploiting a serious remote code execution vulnerability in Microsoft SharePoint. Active attacks have been observed since early July.
-
Three Attacks on Passkeys: The Cryptography Held, but the Protection Was Bypassed
Last week researchers demonstrated three separate ways to bypass passkey protection — from recovering private keys to impersonating privileged users — without touching the cryptography itself.
-
The Windows 11 Weather app eats up more than a gigabyte of RAM
The stock Weather app in Windows 11 can hog upwards of 1.2 GB of RAM — five times as much as its macOS counterpart. The reason: it's essentially an MSN web app running on the WebView2 engine.
-
Edge Follows Chrome in Shutting the Door on Old Ad Blockers
Microsoft is ending support for Manifest V2 in the Edge browser, putting uBlock Origin and other extensions built on the outdated platform in the crosshairs. The full transition will wrap up by the end of 2026.
-
Breach of Britain's PNLD: Police Contacts Leaked to the Dark Web
The UK's Police National Legal Database has confirmed a leak of work contact details for police officers, officials and partners. The data was published on the dark web by the group ExfilSquad.
-
F*: the programming language where proofs are built into the code
Developed by Microsoft Research, Inria and the community, the F* language combines functional programming with formal proofs. Its code already runs in Firefox, the Linux kernel and the Azure cloud.
-
Xbox Prices Climb in Europe: Up to €200 or £170 More
Microsoft has revealed new Xbox console prices for the EU and the UK. This is the third increase since May 2025, and the jump is unprecedented — as much as 43%.
-
Hacked Hotel Wi-Fi Pushes Fake Updates Carrying a Spyware Trojan
Microsoft has detailed an operation dubbed CaptiveCrunch: through hijacked hotel networks, guests are served bogus browser updates that lead to the CornFlake trojan, which can reach the camera, microphone and keyboard.
-
CosmosEscape: An Azure Cosmos DB Flaw Opened the Door to Every Customer's Databases
Wiz researchers demonstrated an attack chain that led through a Gremlin sandbox escape to a platform key granting access to any Cosmos DB database. Microsoft has fixed the issue.
-
Nadella sets a course to compete with OpenAI and Anthropic
Against the backdrop of record earnings at Microsoft, the company's chief openly pitches businesses its own models and agents as an alternative to the very labs it has invested in.
-
The Worm in the Document: How an Attack Self-Propagates Through Copilot in Word
A researcher has shown that instructions hidden inside a document can make Copilot for Word quietly alter figures in reports and copy malicious code into new files, turning them into carriers of the infection. Over 144 days, Microsoft was still unable to close the vulnerability.
-
Microsoft's Secure Boot Could Be Bypassed in a Couple of Clicks for Almost Its Entire Life
Researchers at ESET have found that Secure Boot, the mechanism Microsoft devised to protect firmware from infection, could be trivially bypassed for 13 of the 14 years it has existed.
-
Microsoft unveils its first cybersecurity model and the Perception agent platform
The company has released MAI-Cyber-1-Flash, a specialized model, and Perception, a platform built on teams of AI agents, throwing down the gauntlet to Anthropic, Google and OpenAI.
-
Microsoft blames a network maintenance system bug for the massive Microsoft 365 outage
A bug in an automated maintenance-request system removed IP routes from more devices than intended, disrupting Azure and Microsoft 365.
-
Certighost: An Ordinary AD User Can Impersonate a Domain Controller
Researchers have published a working exploit for AD CS that lets an ordinary account obtain a domain controller certificate and, via DCSync, reach the krbtgt secret. Microsoft closed the vulnerability with its July 14 update.
- More