#microsoft
-
An SVG image ran commands with SYSTEM privileges on Bing Images servers
A specially crafted SVG file submitted to Bing image search executed arbitrary commands on Microsoft's servers — as root on Linux and NT AUTHORITY\SYSTEM on Windows. Microsoft closed both vulnerabilities on its side before disclosure.
-
LG monitors were quietly installing an app on Windows that advertised McAfee
Some LG monitors were silently installing a program on connected computers through Windows Update that displayed ads for McAfee antivirus. After the story went public, Microsoft said LG would disable the pop-ups.
-
Exchange 2016 and 2019 Will Go Without Security Updates from November
Microsoft is definitively closing the Extended Security Updates program for Exchange Server 2016 and 2019: the final patches will ship in October, and there will be no further extensions.
-
An Invisible Pull-Request Comment Turns an AI Reviewer Agent into a Spy
A single hidden HTML comment in Azure DevOps can redirect a developer's AI agent into other people's projects and quietly siphon out their data. The cause: a forgotten safeguard in Microsoft's official MCP server.
-
Police dismantle the Kratos phishing platform and arrest its developer
Law enforcement in Germany and the US has knocked out the infrastructure of one of the largest phishing services, and its technical administrator has been arrested in Indonesia.
-
Critical SharePoint Vulnerability CVE-2026-50522 Exploited After PoC Release
The third SharePoint Server vulnerability from Microsoft's July patch batch has come under active exploitation: attackers are stealing servers' machine keys to gain persistence in the system.
-
Windows LegacyHive Vulnerability Gets a Free Unofficial Patch
Free micropatches from ACROS Security have been released for a fresh 0-day in the Windows User Profile Service that allows privilege escalation on fully patched systems. There is still no official fix from Microsoft.
-
Microsoft Warns of Surge in ACR Stealer Malware Attacks
The company has recorded a rise in attacks using ACR Stealer — malware that steals passwords and tokens from the browsers of corporate customers.
-
New LegacyHive exploit discovered for privilege escalation in Windows
A researcher operating under the alias Nightmare Eclipse has published a zero-day exploit called LegacyHive that grants administrator rights on fully updated Windows systems.
-
Microsoft Confirms the Existence of a Non-Disableable GDID Device Identifier in Windows
Microsoft has confirmed that the Windows operating system contains a device identifier called GDID that cannot be turned off. Details about it appear in the materials of an FBI court case.
-
Researcher Publishes New PoC for Windows Vulnerability Shortly After Patch Tuesday
A specialist using the alias Chaotic Eclipse has presented the LegacyHive exploit, which leverages a vulnerability in the Windows User Profile Service to escalate privileges.
-
CISA Warns of Active Exploitation of SharePoint Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has reported that attackers are actively exploiting three vulnerabilities to breach internet-facing on-premises SharePoint servers. Administrators are advised to install updates without delay.
-
Microsoft blocks the July Windows 11 update on some Dell PCs
After installing the July Windows 11 security update, some Dell computers shut down unexpectedly and lose performance. Microsoft has paused the update for these devices.
-
Microsoft Ships a Record-Breaking Patch Set: 622 Vulnerabilities and Two Actively Exploited 0-Days
Microsoft's July Patch Tuesday became the largest in the company's history — 622 vulnerabilities fixed, two of them already being used by attackers.
-
Microsoft Details Three Scenarios for ShinyHunters' Attacks on Salesforce
Microsoft analyzed a year-long ShinyHunters campaign against corporate Salesforce environments, noting that the attackers did not exploit platform vulnerabilities but instead abused trusted OAuth connections.
-
Nadella Warns Companies About the Dangers of Third-Party AI Models
In a blog post, Microsoft chief Satya Nadella cautioned enterprises against over-reliance on proprietary models like those released by Anthropic and OpenAI. The publication drew a wide response across the industry.
-
Microsoft's Carbon Emissions Rose 25% in a Year
According to a new sustainability report, Microsoft's carbon emissions increased by 25% in 2025. Once again, the company is falling short of its own climate targets.
-
Microsoft Will Ship More Security Fixes Thanks to AI
Microsoft says that using artificial intelligence to hunt for vulnerabilities will lead to a growing number of fixes in Windows 11's monthly updates.
-
Microsoft Patches RoguePlanet Zero-Day in Defender
Microsoft has released a fix for a zero-day vulnerability in Defender called RoguePlanet. The issue came to light after the June 2026 “Patch Tuesday.”
-
Microsoft Cuts AI Spending, Betting on Its Own Models
Microsoft has joined the ranks of tech giants scaling back their artificial intelligence spending. The company plans to rely more heavily on its own models.
- More