[ad_1] Ravie LakshmananMay 21, 2026Endpoint Security / Vulnerability Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The …
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities Read More
[ad_1] Ravie LakshmananMay 20, 2026Artificial Intelligence / Security Testing Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the security of artificial …
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development Read More
[ad_1] Microsoft on Tuesday said it disrupted a malware-signing-as-a-service (MSaaS) operation that weaponized the company’s Artifact Signing system to deliver malicious code and conduct ransomware and other attacks, compromising thousands …
Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks Read More
[ad_1] Ravie LakshmananMay 20, 2026Vulnerability / Encryption Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week. The zero-day flaw, now …
Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit Read More
[ad_1] Microsoft on Thursday disclosed a zero-day vulnerability in Exchange that’s under active exploitation, but four days later customers are still awaiting a patch. The zero-day, tracked as CVE-2026-42897, affects …
Microsoft Exchange Zero-Day Under Attack, No Patch Available Read More
[ad_1] Ravie LakshmananMay 15, 2026Microsoft / Vulnerability Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the …
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email Read More
[ad_1] For the first time in nearly two years, Microsoft’s monthly security update featured no actively exploited zero-day vulnerabilities or previously disclosed flaws. But that welcome reprieve aside, Microsoft’s May …
It’s Patch Tuesday for Microsoft and Not a Zero-Day In Sight Read More
[ad_1] The Iranian state-sponsored hacking group known as MuddyWater (aka Mango Sandstorm, Seedworm, and Static Kitten) has been attributed to a ransomware attack in what has been described as a …
MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack Read More
[ad_1] An attacker with administrative privileges can gain access to Microsoft Edge user passwords even when they’re not in use, because the browser stores them in cleartext in process memory …
Microsoft Edge Stores Passwords in Process Memory, Posing Risk Read More
[ad_1] Ravie LakshmananApr 28, 2026Vulnerability / Identity Management An administrative role meant for artificial intelligence (AI) agents within Microsoft Entra ID could enable privilege escalation and identity takeover attacks, according …
Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover Read More