Skip to main content
← CVE Tracker

Vendor

Microsoft

295 articles

Advertisement

MEDIUM
Cloud Security

Microsoft Exchange Online Outage: Troubleshooting Access Failures

Microsoft Exchange Online service disruption prevents global users from accessing mailboxes and calendars. Review technical impacts and mitigation steps.

Runtime Rebel Intel
3 min read · Mar 16, 2026
HIGH
Vulnerabilities

Windows 11 24H2 RRAS RCE: Microsoft Issues OOB Hotpatch Fix

Microsoft releases an out-of-band hotpatch for Windows 11 24H2 to address critical RRAS remote code execution vulnerabilities CVE-2024-43513 and CVE-2024-49053.

Runtime Rebel Intel
3 min read · Mar 15, 2026
HIGH
Vulnerabilities

Windows 11 C: Drive Access Failure on Samsung PCs - Mitigation Guide

Microsoft investigates an issue where February 2026 Windows 11 security updates prevent C: drive access on Samsung laptops, blocking all applications.

Runtime Rebel Intel
4 min read · Mar 14, 2026
INFO
Cloud Security

Microsoft Investigates Classic Outlook Sync & Connection Issues

Microsoft is actively investigating widespread classic Outlook desktop client synchronization and connectivity problems impacting users globally.

Runtime Rebel Intel
4 min read · Mar 13, 2026
Storm-2561 Leverages SEO Poisoning for Credential Theft
HIGH
Threat Intel

Storm-2561 Leverages SEO Poisoning for Credential Theft

Microsoft warns of Storm-2561's credential theft campaign using SEO poisoning to distribute fake, digitally signed VPN clients disguised as legitimate enterprise…

Runtime Rebel Intel
5 min read · Mar 13, 2026
HIGH
Vulnerabilities

Microsoft Patch Tuesday Analysis: Addressing Critical RCE and Quishing

Technical analysis of the March 2026 Patch Tuesday cycle, focusing on Windows RCE, kernel-level privilege escalation, and emerging QR code phishing trends.

Runtime Rebel Intel
3 min read · Mar 13, 2026
HIGH
Vulnerabilities

CVE-2024-21410: Protect Microsoft Exchange from NTLM Relay Attacks

Deep dive into CVE-2024-21410, a critical privilege escalation vulnerability in Microsoft Exchange. Learn how to detect exploits and implement EPA mitigations.

Runtime Rebel Intel
3 min read · Mar 12, 2026
Microsoft March Patch Tuesday: 84 Flaws Fixed Including Public Zero-Days
HIGH
Vulnerabilities

Microsoft March Patch Tuesday: 84 Flaws Fixed Including Public Zero-Days

Microsoft releases March security updates for 84 vulnerabilities, including 8 Critical flaws and 2 public zero-days. Patch now to prevent RCE and privilege escalation.

Runtime Rebel Intel
3 min read · Mar 11, 2026
Microsoft March Update: 83 CVEs Patched, Prioritization Key
HIGH
Vulnerabilities

Microsoft March Update: 83 CVEs Patched, Prioritization Key

Microsoft's March Patch Tuesday addresses 83 CVEs across its product line. Learn why applying these security updates is crucial for defending against potential…

Runtime Rebel Intel
4 min read · Mar 11, 2026
HIGH
Vulnerabilities

March 2026 Patch Tuesday: Microsoft Fixes 77 Vulnerabilities

Microsoft's March 2026 Patch Tuesday addresses 77 vulnerabilities across Windows and other software. Learn about the risks and how to prioritize patching.

Runtime Rebel Intel
3 min read · Mar 11, 2026
CRITICAL
Vulnerabilities

Microsoft Patch Tuesday March 2026: 8 Critical Vulnerabilities Addressed

Microsoft's March 2026 Patch Tuesday addresses 93 vulnerabilities, including 8 critical issues across various products and 9 in Microsoft Edge (Chromium).

Runtime Rebel Intel
4 min read · Mar 10, 2026
HIGH
Vulnerabilities

Microsoft Patch Tuesday: 83 Vulnerabilities, Critical Flaw Addressed

Microsoft's latest Patch Tuesday addresses 83 vulnerabilities across its product line, including one critical flaw. Security teams must prioritize immediate patching.

Runtime Rebel Intel
4 min read · Mar 10, 2026
HIGH
Vulnerabilities

Windows 10 KB5078885 ESU Fixes Two Zero-Days — Patch Guidance

Microsoft releases Windows 10 KB5078885 Extended Security Update to address two zero-day vulnerabilities and a critical system shutdown bug for ESU subscribers.

Runtime Rebel Intel
3 min read · Mar 10, 2026
INFO
Identity & Access

Entra Passkeys: Phishing-Resistant Windows Sign-In Deployment

Microsoft introduces phishing-resistant passkey support for Entra ID on Windows, leveraging Windows Hello to secure the sign-in process against credential theft.

Runtime Rebel Intel
3 min read · Mar 10, 2026
INFO
Vulnerabilities

Microsoft Windows Hotpatching to be Enabled by Default in May 2026

Microsoft will enable hotpatching by default for Intune-managed Windows devices in May 2026, allowing security updates without reboots to reduce downtime.

Runtime Rebel Intel
3 min read · Mar 10, 2026
HIGH
Threat Intel

Microsoft Teams Phishing Deploys A0Backdoor via Quick Assist

Attackers are targeting healthcare and finance employees with Microsoft Teams phishing to deploy A0Backdoor using the native Windows Quick Assist tool.

Runtime Rebel Intel
4 min read · Mar 10, 2026
MEDIUM
Identity & Access

Microsoft Teams Third-Party Bot Tagging Enhances Meeting Security

Microsoft Teams updates meeting lobbies to identify third-party bots, helping administrators prevent unauthorized data collection and social engineering.

Runtime Rebel Intel
4 min read · Mar 9, 2026
HIGH
Threat Intel

AI-Enhanced Cyberattacks: Microsoft Details LLM Abuse by APT Groups

Microsoft reveals how nation-state actors like APT28 and Crimson Sandstorm are using AI to automate reconnaissance and refine social engineering lures.

Runtime Rebel Intel
4 min read · Mar 7, 2026
Windows Terminal Exploited in ClickFix Campaign for Lumma Stealer
HIGH
Threat Intel

Windows Terminal Exploited in ClickFix Campaign for Lumma Stealer

Microsoft identifies a new ClickFix campaign using Windows Terminal to deliver Lumma Stealer. Analysis of social engineering TTPs and mitigation steps included.

Runtime Rebel Intel
4 min read · Mar 6, 2026
HIGH
Malware

Bing AI Promotes Fake GitHub Repositories Spreading Info-Stealers

Microsoft Bing AI search promoted malicious GitHub repositories hosting fake OpenClaw software, leading to info-stealing and proxy malware deployment.

Runtime Rebel Intel
4 min read · Mar 6, 2026
HIGH
Vulnerabilities

Microsoft Outlook CVE-2025-21418: Mitigating NTLM Relay Attacks

Analysis of CVE-2025-21418 in Microsoft Outlook. Learn how attackers bypass security features to leak NTLM hashes and the steps needed for mitigation.

Runtime Rebel Intel
3 min read · Mar 5, 2026
Credential Abuse Risks: Solving Microsoft Entra ID MFA Coverage Gaps
HIGH
Identity & Access

Credential Abuse Risks: Solving Microsoft Entra ID MFA Coverage Gaps

Examine how coverage gaps in Microsoft Entra ID and Okta MFA implementations allow attackers to exploit valid credentials within Windows network environments.

Runtime Rebel Intel
3 min read · Mar 5, 2026
MEDIUM
Threat Intel

Sentencing in $24 Million Microsoft Licensing Fraud Scheme

A Florida woman has been sentenced to 22 months in prison for a multi-million dollar scheme involving stolen Microsoft Certificate of Authenticity labels.

Runtime Rebel Intel
3 min read · Mar 2, 2026
APT28 Exploits CVE-2026-21513: MSHTML 0-Day Intelligence
CRITICAL
Threat Intel

APT28 Exploits CVE-2026-21513: MSHTML 0-Day Intelligence

Akamai reports Russia-linked APT28 exploited CVE-2026-21513 in the MSHTML Framework as a zero-day before Microsoft's February 2026 security patch updates.

Runtime Rebel Intel
3 min read · Mar 2, 2026