As part of August’s Patch Tuesday, Microsoft released security updates that address 398 new vulnerabilities. Alongside Windows and Office, other products and services are also affected: Teams, ...

Dubbed CoSnitch by the security researcher who discovered it, the flaw executes an attack chain that exfiltrates data from enterprises without any obvious red flags.

Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited in the wild but is fully mitigated with no ...

Microsoft has released fresh security patches to resolve critical vulnerabilities in Azure, Entra ID, Exchange, and Fabric.

Microsoft’s August 2026 Patch Tuesday fixes around 400 vulnerabilities, including 42 Critical flaws and three Windows zero-days.

Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass ...

Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs.

Microsoft released fixes for a record 570 security vulnerabilities in its largest Patch Tuesday update ever. Image: CROCOTHERY/Adobe Stock Microsoft fixed a record 570 security flaws in July 2026 ...

As per its Project Zero disclosure policies, Google notified Microsoft of its discovery after finding the issue back in November. It gave the company its standard 90 days to fix the problem and ...

Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code ...

The Nightmare-Eclipse and Microsoft saga continues with another major Windows Defender exploit following 'RoguePlanet.' ...

With its dominant position in enterprise IT, Microsoft and its many products understandably provide an inviting target for threat actors. News this week showed just how enticing that target remains.