Advertisement
MuddyWater Exploits Microsoft Teams for False Flag Ransomware
Iranian APT MuddyWater is leveraging Microsoft Teams social engineering to deploy false flag ransomware, obscuring state-sponsored espionage activities.
Microsoft Edge Password Storage: Risk of Credential Dumping
Microsoft Edge stores sensitive user passwords in process memory. A PoC exploit demonstrates how attackers with admin privileges can dump credentials, posing significant…
AitM Phishing Attacks Target US Organizations with Conduct Reports
Microsoft warns of a sophisticated AitM phishing campaign using fake conduct reports to bypass MFA and hijack Microsoft 365 user sessions.
Defeating Persistent OAuth Token Risks in Google and Microsoft Apps
Learn how persistent OAuth tokens create backdoors in AI tools and productivity apps. Discover strategies to detect and remediate long-lived token exposure.
Microsoft Edge Cleartext Password Exposure Risks — Mitigation Guide
Critical analysis of Microsoft Edge credential storage risks. Learn how to prevent cleartext password extraction and secure browser-based identities.
Credential Theft: Microsoft Details Phishing Campaign Targeting 35k Users
Microsoft warns of a global phishing campaign targeting 35,000 users with code-of-conduct lures to steal authentication tokens across 13,000 organizations.
CVE-2024-1086: Copy Fail Linux Privilege Escalation Under Exploitation
CISA adds CVE-2024-1086 (Copy Fail) to its KEV catalog after Microsoft observes exploitation of this Linux Netfilter privilege escalation vulnerability.
Microsoft Defender DigiCert False Positive: Trojan:Win32/Cerdigent.A!dha
Microsoft Defender is incorrectly identifying DigiCert root certificates as the Cerdigent trojan, causing certificate removal and enterprise disruptions.
ConsentFix v3: How Attackers Automate Azure OAuth Abuse
Attackers use ConsentFix v3 to automate illicit consent grants in Microsoft Azure, enabling persistent access to Entra ID data without user passwords.
Windows 11 Modern Run Dialog: Technical Overview and Security Analysis
Microsoft updates the Windows 11 Run dialog in Insider Preview Build 27793 with WinUI 3 components, Dark Mode, and improved performance for OS interactions.
Windows 11 24H2 Remote Desktop Security Warning Bug Patched
Microsoft resolves a Windows 11 24H2 bug where Remote Desktop (.rdp) security warnings failed to display correctly after the October 2024 updates.
KB5083631 Update: Windows 11 Batch File and Startup Performance
Microsoft releases KB5083631 for Windows 11, introducing batch file security enhancements, Xbox Game Bar updates, and optimizations for startup applications.
Managed Windows 11 Bloatware Removal: New IT Admin Policy Controls
Microsoft updates Windows 11 policy allowing IT admins to selectively uninstall pre-installed Store apps, reducing the attack surface in managed environments.
Microsoft Teams Free Backend Change Disrupts Chat and Calling
Microsoft confirms a backend configuration change has broken core functionality for Microsoft Teams Free users, impacting global business communication.
Microsoft RDP Security Warning Display Bug — Mitigation Guide
Microsoft confirms security warnings for Remote Desktop (.rdp) files may display incorrectly on Windows 10 and 11, potentially obscuring risk information.
Microsoft Outlook iOS Authentication Issues: Remediation and Risks
Microsoft resolves global Outlook.com outage but requires iOS Mail app users to re-authenticate. Learn how to secure accounts and mitigate phishing risks.
CVE-2026-32202: Active Exploitation of Windows Shell Spoofing Bug
Microsoft confirms CVE-2026-32202, a Windows Shell spoofing flaw, is under active exploitation. Read our analysis and mitigation guide for enterprise security.
Microsoft Entra ID Flaw: Agent ID Administrator Role Escalation
Microsoft patches a critical logic flaw in the Entra ID Agent ID Administrator role that allowed attackers to take over service principals and escalate privileges.
UNC6692 Leverages Teams, AWS S3 for Malware & Cloud Abuse
Newly discovered threat actor UNC6692 combines social engineering via Microsoft Teams with custom 'Snow' malware and AWS S3 cloud abuse in multi-pronged attacks.
Microsoft Outlook.com Sign-In Failures: Analysis of Ongoing Outage
Microsoft confirms an Outlook.com outage causing intermittent sign-in failures and mailbox access issues. Learn about the impact on enterprise productivity.
Microsoft Revamps Windows Insider Program for Windows 11 Testing
Microsoft's Windows Insider Program overhaul introduces new Canary and Dev channels, changing how security teams test Windows 11 reliability and performance.
UNC6692 Targets Microsoft Teams to Deploy Snow Malware
UNC6692 is leveraging Microsoft Teams and social engineering to deliver the modular Snow malware suite, facilitating long-term persistence and data theft.
Microsoft Enterprise Copilot: New Uninstall Policy for Admins
Microsoft introduces a new policy setting allowing IT administrators to uninstall Copilot from enterprise devices, enhancing management and control over AI features.
UNC6692 Social Engineering: Deploying the SNOW Custom Malware Suite
UNC6692 leverages Microsoft Teams and S3-hosted payloads to deploy the SNOW modular malware ecosystem, targeting enterprise Windows environments.