EchoLeak - Zero-Click AI Vulnerability Discovered in Microsoft 365 Copilot
Security researchers at Aim Labs have uncovered a sophisticated zero-click vulnerability dubbed " EchoLeak " that enables attackers to auto…
Microsoft
Critical Microsoft Scripting Engine Zero-Day Exploited in Wild, PoC Now Public
Microsoft, in its May 2025 patch Tuesday update, addressed 72 vulnerabilities, including five zero-days. One zero-day vulnerability in its Scripting …
Microsoft Exposes New Russian Cyber Espionage Group Targeting NATO Allies
Microsoft Threat Intelligence has identified a sophisticated new Russian-affiliated threat actor called Void Blizzard , also known as LAUNDRY BEAR , …
Global Takedown Disrupts LummaC2 Information-Stealing Malware Operation
Coordinated effort by Microsoft, DOJ, and international partners dismantles infrastructure behind malware that infected nearly 400,000 computers worl…
Microsoft Unveils Windows ML: A New Era for AI Development on Windows
Microsoft has officially launched the public preview of Windows ML, a cutting-edge runtime designed to optimize on-device machine learning model infe…
Windows Update Triggers BitLocker Recovery Screen
Microsoft has resolved a critical issue with the May 2025 Windows security update ( KB5058379 ) that caused affected systems to boot directly into Bi…
Critical Security Vulnerabilities Impacting Core Microsoft Cloud Services
Microsoft has confirmed the discovery of four critical security vulnerabilities affecting its core cloud services, with one reaching the maximum poss…
.webp)
Windows 11 24H2 Update Now Auto Download for All Eligible Users
Microsoft has entered the final phase of its Windows 11 24H2 update rollout, now making the major update mandatory for all eligible consumer devices.…
Microsoft Uncovers Critical macOS Sandbox Escape Vulnerability
Microsoft security researchers have discovered a significant vulnerability in macOS that allowed attackers to bypass Apple's App Sandbox protecti…
Microsoft Launches Windows 365 Link Cloud PC Device
Microsoft has officially launched Windows 365 Link, its first purpose-built Cloud PC device, alongside new innovations for its Windows 365 service. T…
New Method to Install Windows 11 Without Microsoft Account
Since 2022, Windows 11 has mandated both an internet connection and a Microsoft Account login while setting up new PCs. Many users who prefer local a…
Microsoft's March 2025 Update Patches Critical Zero-Day Exploited via PipeMagic Backdoor
Microsoft's March 2025 Patch Tuesday has addressed 57 security flaws, including seven zero-day vulnerabilities— six of which were already being a…
Microsoft Uncovers Massive Malvertising Campaign Affecting One Million Devices via GitHub
Microsoft Threat Intelligence has detected a large-scale malvertising campaign that impacted approximately one million devices globally in December 2…
Microsoft Patch Zero-Click Windows Vulnerability
Microsoft recently patched a high-risk zero-click vulnerability in the Windows operating system. The flaw identified as CVE-2025-21298 carries a nea…
Microsoft Exposes Silk Typhoon's Evolving Supply Chain Attacks
Microsoft Threat Intelligence has released a detailed report on Silk Typhoon, a sophisticated Chinese state-sponsored espionage group that has evolve…
Microsoft Announces New Exchange Online Outbound Email Limits
Microsoft has announced the implementation of new tenant-level outbound email limits for Exchange Online users, set to roll out in phases beginning M…
Microsoft Exposes Russian Hacking Group "BadPilot" Targeting Global Infrastructure
Microsoft Threat Intelligence has revealed details about an extensive cyber operation conducted by a subgroup within the Russian state actor Seashell…
Microsoft Patches Critical BitLocker Vulnerability Enabling Data Extraction
Security researchers have disclosed a significant vulnerability in Microsoft BitLocker, the full-disk encryption feature in Windows, which could allo…
Strengthening Microsoft 365 Security for Resilient Business Operations
Microsoft 365 is an integrated workspace that enhances productivity and optimizes operations for most firms, not just software. Its cloud-based natur…
Critical Zero-Click Vulnerability in Windows OLE Poses Widespread Risk
Microsoft has addressed a severe security vulnerability ( CVE-2025-21298 ) in Windows Object Linking and Embedding ( OLE ) that could allow attackers…