Advertisement
BlueNoroff Zoom Phishing Kit Targets Crypto Wallets
BlueNoroff uses a custom phishing kit to profile crypto wallets before delivering malware through impersonated Zoom and Microsoft Teams platforms.
Microsoft Fixes Exchange Online Erroneous Mailbox Quarantine Issue
Microsoft is mitigating a service disruption where Exchange Online mailboxes were incorrectly quarantined, causing delivery failures and access issues.
CVE-2026-50522: SharePoint RCE Exploitation to Steal Machine Keys
Critical CVE-2026-50522 in Microsoft SharePoint is actively exploited to steal machine keys, enabling persistent access. Understand the threat and mitigation.
WSUS Sync Delays & Timeouts: Microsoft's Manual Fix Guidance
Microsoft provides manual steps to resolve persistent sync delays and timeouts impacting Windows Server Update Services (WSUS) deployments, affecting Windows Update…
HollowGraph Malware Uses Microsoft Graph for Stealthy C2
HollowGraph malware leverages Microsoft Graph API calendar features for covert command-and-control and data exfiltration from Microsoft 365 environments.
HollowGraph Malware Leverages Microsoft 365 Calendar for Stealthy C2
HollowGraph, a new espionage malware, hides C2 commands and exfiltrates data via legitimate Microsoft 365 calendar events, mimicking normal Graph API traffic.
KB5121767: Microsoft Fixes Windows 11 Dell PC Shutdown Bug
Microsoft issues emergency out-of-band update KB5121767 to resolve critical system shutdown issues affecting Dell PCs running the July 2026 Windows 11 update.
Microsoft Investigates WSUS Server Synchronization Timeout Errors
Microsoft confirms technical issues causing WSUS synchronization delays and timeouts. Learn how this affects enterprise patch management and security.
ACR Stealer Campaign Targets Microsoft Enterprise Credentials
Microsoft warns of a surge in ACR Stealer attacks targeting browser credentials and session tokens to bypass multi-factor authentication in enterprise environments.
Windows Server 2022 Mainstream Support Transition: Strategic Guide
Microsoft outlines the Windows Server 2022 transition to extended support in October 2026. Learn how this lifecycle shift impacts security updates and SOC planning.
CVE-2026-58644: SharePoint RCE Zero-Day Exploited in the Wild
CISA adds CVE-2026-58644, a critical Microsoft SharePoint Server deserialization RCE vulnerability with a CVSS 9.8, to its Known Exploited Vulnerabilities catalog.
Microsoft SharePoint RCE via CVE-2024-38094: Mitigation Guide
CISA adds three exploited SharePoint vulnerabilities to the KEV catalog, including CVE-2024-38094. Learn how to detect and mitigate these critical RCE flaws.
Microsoft April 2024 Patch Tuesday Analysis: Three Zero-Days Patched
Analysis of Microsoft's April 2024 Patch Tuesday featuring 147 CVEs, including critical zero-days CVE-2024-26234 and CVE-2024-29988. Mitigation guide for SOCs.
Windows 11 Compatibility Hold for Dell Devices: Mitigation Guide
Microsoft blocks October 2024 Windows 11 updates for specific Dell hardware due to kernel-level conflicts causing spontaneous shutdowns and performance loss.
Microsoft Patch Tuesday: Addressing 570 Security Flaws
Microsoft released updates for a record 570 security flaws in Windows and other software, with AI aiding discovery. Learn the impact and mitigation.
Microsoft Zero-Days: Active Directory & SharePoint Exploited
Microsoft addresses 622 vulnerabilities, including two actively exploited zero-days in Active Directory and SharePoint Server.
Microsoft Patches Record 622 Flaws and Two Zero-Days — Patch Now
Microsoft releases its largest Patch Tuesday ever, addressing 622 vulnerabilities and two zero-days under active attack. Analyze the security impact here.
ModHeader Extension Pulled Over Dormant Browsing Data Collector
ModHeader, a popular browser extension with 1.6M installs on Chrome and Edge, was pulled by Google and Microsoft after a dormant browsing history collector was found.
Forg365 PhaaS: Bypassing MFA in Microsoft 365 via AitM Attacks
Forg365 PhaaS enables attackers to compromise Microsoft 365 accounts using AI-assisted lures and device code phishing to bypass multi-factor authentication.
Evilginx Operations Exposed: Misconfigured Server Leaks M365 Phishing Kits
A misconfigured Python server exposed three live Evilginx phishing operations targeting Microsoft 365, revealing the attacker's toolkit and session cookies.
Analyzing Microsoft BitLocker Security Wrapper Vulnerabilities
New security vulnerabilities identified in a Microsoft BitLocker security wrapper pose a risk to organizations and potentially ATMs, potentially leading to compromise.
Windows Defender RoguePlanet Zero-Day Threat: Patch Now
Microsoft addresses the 'RoguePlanet' Windows Defender zero-day, with a PoC released by researcher Nightmare-Eclipse. Patching is critical.
GigaWiper Windows Backdoor Analysis: Disk Wiping & Fake Ransomware
Runtime Rebel analyzes GigaWiper, a destructive Windows backdoor identified by Microsoft, bundling disk wiping, fake ransomware, and spyware capabilities.
Forg365 PhaaS Leverages AI, AiTM for Microsoft 365 Account Compromise
Forg365 PhaaS targets Microsoft 365 with AI-assisted AiTM and device code phishing.