Cloud Security
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Microsoft"
Vulnerabilities
The flaws can be exploited for remote code execution, authentication bypass, and device takeover.
Vulnerabilities
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Vulnerabilities
The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.
Mobile & Wireless
Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations.
Artificial Intelligence
The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing.
Vulnerabilities
Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed.
Artificial Intelligence
Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and control over automated participants in sensitive meetings.
Cybercrime
Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.
Vulnerabilities
The company warned about zero-day attacks exploiting the Exchange Server vulnerability CVE-2026-42897 on May 14.
Vulnerabilities
Three of the vulnerabilities fixed with the latest Patch Tuesday updates were publicly disclosed before Microsoft addressed them.
Vulnerabilities
Microsoft responds to backlash over its threats of legal action against researchers who publicly disclose zero-day vulnerabilities.
Mobile & Wireless
A simple development setting bypassed protections designed to prevent unauthorized Android apps from accessing Microsoft account tokens, exposing billions of installations.
Vulnerabilities
The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition.
Malware & Threats
Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.
Artificial Intelligence
Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws.
Vulnerabilities
Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence.
Phishing
The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.
Vulnerabilities
Researchers found more than 80 high-impact cloud and AI vulnerabilities during the event, which had a $5 million prize pool.
Artificial Intelligence
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.
Cloud Security
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Malware & Threats