Advertisement
GodDamn Ransomware Leverages Signed Driver to Disable EDR
Analysis of GodDamn ransomware's BYOVD technique, utilizing a Microsoft co-signed driver to disable security software, impacting US companies.
CVE-2026-50656: Microsoft Defender Privilege Escalation – Patch Now
Microsoft patches 'RoguePlanet' vulnerability, CVE-2026-50656, in Defender's Malware Protection Engine, enabling privilege escalation. Update immediately.
OWA Light Retirement in Exchange Server: Planning for the Change
Microsoft is retiring OWA Light in Exchange Server. This advisory details the operational impact, affected versions, and critical steps for administrators to manage user…
Microsoft Defender RoguePlanet Zero-Day Vulnerability Patching Guide
Microsoft addresses the RoguePlanet zero-day in Defender. Learn about the exploitation risks, detection methods, and how to update systems effectively.
Microsoft 365 Entra Passkey Vishing Targets: Account Takeover Risk
A sophisticated vishing campaign targets Microsoft 365 users, tricking them into enrolling malicious Entra passkeys for account takeover. Learn detection and prevention.
EvilTokens Ghost Phishing Targets Microsoft 365 via Browser Decryption
Analysis of the EvilTokens ghost phishing campaign targeting Microsoft 365 users via browser-side decryption to bypass traditional email security gateways.
Windows 11 26H2 Default Backup for Entra-Joined Systems
Microsoft will enable Windows settings backup by default for Entra-joined organizational systems after Windows 11 26H2 upgrade, impacting IT management and compliance.
Microsoft Introduces Windows 11 Cloud Rebuild Recovery Feature
Microsoft is testing the new Cloud Rebuild recovery feature for Windows 11 Insider Preview, offering a streamlined, cloud-based OS reinstallation option.
EtherRAT Malware via Microsoft Teams IT Support Impersonation
Threat actors leverage fake IT support calls on Microsoft Teams to deploy EtherRAT malware, gaining initial access to corporate networks.
ARToken PhaaS Exposes EvilTokens' M365 Phishing Toolkit
ARToken PhaaS, an affiliate of EvilTokens, offers advanced Microsoft 365 phishing capabilities, including MFA bypass. Learn about its TTPs and how to defend.
Microsoft Teams: New Controls for AI Bot Meeting Access
Microsoft Teams introduces new admin policies requiring organizer approval for external AI bots, enhancing control over automated participants in sensitive meetings.
Windows 11 Emoji Panel GIF Fix Highlights Supply Chain Dependency
Microsoft resolves Windows 11 Emoji Panel GIF functionality after provider shutdown, underscoring third-party service dependencies in OS features.
Microsoft's Post-Quantum Cryptography Acceleration: A 2029 Shift
Microsoft accelerates its post-quantum cryptography (PQC) timeline to 2029, urging security professionals to assess current encryption standards and prepare for…
CVE-2026-33825: BlueHammer Zero-Day in Microsoft Defender Exploited by Ransomware
Analysis of the BlueHammer zero-day, CVE-2026-33825, in Microsoft Defender, actively exploited by ransomware groups. Learn detection and mitigation strategies.
AI Agents Vulnerable to Data Leak via Poisoned MCP Tools
Microsoft warns that malicious tool descriptions for AI agents can lead to stealthy data exfiltration, bypassing security controls by mimicking routine actions.
Microsoft Teams Enhances Meeting Security with New Bot Protection Policy
Microsoft introduces a new admin policy for Teams meetings, preventing unapproved third-party bots from joining, mitigating meeting bombing incidents.
Windows BlueHammer Flaw Exploited by Ransomware Gangs — Patch Now
CISA warns that ransomware gangs are now exploiting the BlueHammer privilege escalation vulnerability in Microsoft Defender to bypass security controls.
Microsoft Pulls 119 Malicious StegoAd Edge Extensions
Microsoft removes 119 Edge extensions linked to the StegoAd campaign, which used steganography in images and fonts to steal credentials and commit ad fraud.
Windows 10 ESU Extended to 2027: Security Implications
Microsoft extends free Windows 10 Extended Security Updates (ESU) for consumers until October 2027. Understand the security implications and planning for end-of-life.
Amadey & StealC Malware C2 Infrastructure Disrupted
Microsoft and global allies dismantle the shared C2 infrastructure of Amadey botnet and StealC info-stealer malware, disrupting ongoing cybercrime operations.
Amadey & StealC Malware Operations Disrupted by Operation Endgame
Operation Endgame, led by Europol and Microsoft, has disrupted infrastructure supporting Amadey and StealC info-stealer malware, impacting cybercriminal services.
Windows 11 KB5095093: New Point-in-Time Restore and Bug Fixes
Microsoft releases KB5095093 for Windows 11 24H2, introducing a critical Point-in-Time restore feature and addressing multiple system-level bugs.
Microsoft AutoGen Studio RCE via AutoJack Flaw — Patch Now
Microsoft patched the AutoJack vulnerability chain in AutoGen Studio, enabling remote code execution through malicious AI agent manipulation.
North Korean Sapphire Sleet Compromises 140+ Mastra AI npm Packages
Microsoft attributes the Mastra AI supply chain attack to Sapphire Sleet (BlueNoroff), involving 140+ malicious npm packages targeting AI developers.