Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The scheduled Patch Tuesday updates for September 2024 have arrived for all Microsoft products. The…Microsoft September Patch Tuesday Patched 4 Zero-Day Flaws …
A security researcher discovered numerous vulnerabilities in Microsoft Copilot that could expose users’ personal information,…Microsoft Patched Copilot Vulnera…
Microsoft’s AI flagship, Copilot Studio, potentially threatened the firm’s internal infrastructure. Specifically, a critical SSRF…Microsoft Copilot Studio Vuln…
Researchers warn macOS users about numerous unpatched vulnerabilities in Microsoft apps for the system. Exploiting…Unpatched Vulnerabilities In Microsoft macOS…
From the ~100 security fixes released this month by Microsoft, a critical vulnerability also received…Microsoft Users Rush To Patch Zero-Click TCP/IP RCE Flaw …
The August 2024 Patch Tuesday Update bundle from Microsoft is huge, with 10 zero-day fixes.…Microsoft August Patch Tuesday Fixed 10 Zero-Day Vulnerabilities on…
Heads up, Microsoft users! It’s time to update your devices with the latest security updates,…Microsoft July 2024 Patch Tuesday Fixed 140+ Vulnerabilities on L…
Microsoft alerts organizations, particularly those using remote access features on their networks, to migrate to…Microsoft Recommends ‘Always On VPN’ As It Dep…
After much hype and the subsequent negative attention due to privacy concerns, Microsoft Recall planned…Microsoft Reconsiders Windows Recall Release Amidst Pri…
This week marked the release of the monthly Patch Tuesday updates for Microsoft users, rolling…Microsoft June 2024 Patch Tuesday Update Fixed ~50 Vulnerabiliti…
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules…
Microsoft has emphasized the need for securing internet-exposed operational technology (OT) devices following a spate of cyber attacks targeting such environme…
Microsoft rolled out its scheduled Patch Tuesday update for May 2024 this week. Unlike the…Microsoft Patch Tuesday May 2024 Fixed 3 Zero-Days on Latest Hacking…
Microsoft has expanded the availability of its passkey authentication support to more users. So now,…Microsoft Passkey Authentication Now Available For Persona…
Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection.This is done to "facilitate commu…
This month’s Patch Tuesday update bundle from Microsoft is a huge one, requiring immediate user…Microsoft April Patch Tuesday Fixes Dozens of RCE Flaws on Late…
A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus software ins…
A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus software ins…
This week marked the arrival of first monthly scheduled updates from Microsoft for the year…Microsoft Rolls Out January 2024 Patch Tuesday With 49 Bug Fixes on…
After detecting App Installer abuse for malware distribution for several months, Microsoft disabled the protocol…Microsoft Disabled App Installer Following Mal…
After serving users for several years, Microsoft Application Guard bids farewell as the tech giant…Microsoft Deprecates Application Guard For Edge For Business…
Microsoft on Thursday said it’s once again disabling the ms-appinstaller protocol handler by default following its abuse by multiple threat actors to distribut…
This week marked the release of the last patch Tuesday updates for Microsoft users for…Microsoft Patch Tuesday December Addressed 33 Vulnerabilities on Latest …
Microsoft has warned of a new wave of CACTUS ransomware attacks that leverage malvertising lures to deploy DanaBot as an initial access vector.The DanaBot infe…
