Vulnerabilities
The vulnerability is tracked as CVE-2026-21509 and it can be exploited to bypass security features.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Microsoft"
Phishing
Threat actors are leveraging the file-sharing service for payload delivery in AitM phishing and BEC attacks.
Cybercrime
RedVDS enables threat actors to set up servers that can be used for phishing, BEC attacks, account takeover, and fraud.
Email Security
Threat actors spoof legitimate domains to make their phishing emails appear to have been sent internally.
Vulnerabilities
All critical vulnerabilities in Microsoft, third-party, and open source code are eligible for rewards if they impact Microsoft services.
CISO Strategy
Promotions across Microsoft’s security organization reinforce the company’s shift toward AI-driven defense and tighter operational oversight under Global CISO Igor Tsyganskiy.
Endpoint Security
Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.
Artificial Intelligence
Without proper security controls, AI agents could perform malicious actions, such as data exfiltration and malware installation.
Cybercrime
Microsoft said the DDoS attack was aimed at an endpoint in Australia and reached 15.72 Tbps and 3.64 Bpps.
Management & Strategy
Microsoft announced new security capabilities for Defender, Sentinel, Copilot, Intune, Purview, and Entra.
Vulnerabilities
CVE-2025-59287 allows a remote, unauthenticated attacker to execute arbitrary code and a PoC exploit is available.
Endpoint Security
In files downloaded from the internet, HTML tags referencing external paths could be used to leak NTLM hashes during file previews.
Threat Intelligence
The U.S. is the top target for cyberattacks, with criminals and foreign adversaries targeting companies, governments and organizations.
Vulnerabilities
CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes.
Ransomware
The tech giant attributed the attacks to Vanilla Tempest, also known as Vice Spider and Vice Society.
Endpoint Security
The tech giant has rolled out fixes for 173 CVEs, including five critical-severity security defects.
CISO Conversations
SecurityWeek talks to Microsoft Deputy CISOs Ann Johnson and Mark Russinovich.
Endpoint Security
Users can continue receiving important security updates for Windows 10 by enrolling in the ESU program.
Vulnerabilities
The flaw could lead to local code execution, allowing attackers to access confidential information on devices running Unity-built applications.
Artificial Intelligence
Microsoft Reduces Israel’s Access to Cloud and AI Products Over Reports of Mass Surveillance in Gaza
Microsoft has disabled services to a unit within the Israeli military after a company review had determined its AI and cloud computing products were...
Cyberwarfare
Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers to reach high-value targets in Israel.
Supply Chain Security
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data.
Vulnerabilities
Artificial Intelligence
Vulnerabilities
