Corrupted Microsoft Office Documents Used In Phishing Campaign

Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets

Microsoft Power Pages Misconfigurations Exposing Sensitive Data

November Patch Tuesday Brings Cornucopia Of 89 Fixes To Windows

Remcos RAT Now Exploiting Microsoft Excel Files

Windows Themes 0-Day Bug Exposes Users To NTLM Credential Theft

Russian Spies Use RDP Files In Unusual Mass Phishing Drive

Kremlin-Backed Hackers Have New Windows And Android Malware To Foist On Ukrainian Foes

Windows Update Takeover Lets An Attacker Revive A Patched Vuln

Pixel Perfect Ghostpulse Malware Loader Hides Inside PNG Image Files

North Korean APT Exploited IE Zero Day In Supply Chain Attack

Microsoft: macOS Vulnerability Potentially Exploited In Adware Attacks

Iranian Cyberspies Exploiting Recent Windows Kernel Vuln

Microsoft Confirms Exploited Zero-Day In Windows Management Console

Microsoft Issues 117 Patches — Some For Flaws Already Under Attack

DOJ, Microsoft Take Down 107 Russian-Backed Star Blizzards Domains

Ransomware Gang Using Stolen MS Entra ID Creds To Bust Into Cloud

Exploiting Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE

Re-Opened Three Mile Island Will Power AI Datacenters Under New Deal

Microsoft Says Windows Update Zero-Day Being Exploited To Undo Security Fixes

Microsoft Hosting Cybersecurity Summit After Global IT Outage

Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation

Microsoft Says North Korean Crypto Thieves Behind Chrome Zero Day

Novel Attack On Windows Spotted In Phishing Campaign

PoC Code Released For Zero Click Critical Windows Vuln

From Copilot To Copirate: How Data Thieves Could Hijack Microsoft's Chatbot

Microsoft Security Tools Questioned For Treating Employees As Threats

Microsoft To Host Security Summit After CrowdStrike Disaster

Microsoft Copilot Studio Vuln Led To Information Disclosure

Windows Zero-Day Attack Linked To North Korea's Lazarus APT

Microsoft Warns Of OpenVPN Vulnerabilities, Potential For Exploit Chains

Microsoft Patches 9 Zero Days, 6 Exploited In The Wild

0.0.0.0 Day Browser Flaw Enables Malicious Requests To Local Networks

Windows Update Flaws Allow Undetectable Downgrade Attacks

CSS Tweaks Help Emails Slip Through Outlook's Anti-Phishing Net

SnakeKeylogger Slithers Into Windows Inboxes To Steal Secrets

CrowdStrike Faces Lawsuits From Customers, Investors

Microsoft Says Azure Outage Caused By DDoS Attack Response

MS Admits 8.5M CrowdStruck Machines Estimate Was Lowballed

Hackers Bypass Windows SmartScreen Flaw To Launch Malware

Seems Like CrowdStrike Caused A Global BSOD?

APT Exploits Windows Zero-Day To Execute Code Via Disabled Internet Explorer

ZDI Shames MS For Yet Another Coordinated Vuln Disclosure Snafu

Introducing A New Vulnerability Class: False File Immutability

Threat Actors Exploited Windows 0-Day For More Than A Year Before Microsoft Fixed It

Japanese Space Agency Spotted Zero-Day Attacks While Cleaning Up Attack On M365

Four Zero Days Headline Hefty July Patch Tuesday Drop

Microsoft Blamed For Million-Plus Patient Record Theft At US Hospital Giant

Microsoft Patches Zero-Click Outlook Vulnerability

Microsoft Delaying Recall Feature To Improve Security

Black Basta Exploits Patched Windows Privilege Escalation Bug

Microsoft President To Testify Over Security Lapses

Let's Kick Off The Summer With A Pwn-Me-By-Wifi Bug In Microsoft Windows

Microsoft Bows To Public Pressure, Disables Controversial Windows Recall By Default

Microsoft Shows Venerable And Vulnerable NTLM Security Protocol The Door

Windows Recall Demands An Extraordinary Level Of Trust That Microsoft Hasn't Earned

Microsoft's AI Recall Feature Raises Security, Privacy Concerns

Microsoft Quick Assist Tool Abused For Ransomware Delivery

Microsoft Warns Of Active Zero Day Exploitation, Patches 60 Windows Vulns

MS Overhauls Cybersecurity Strategy After Scathing CSRB Report