Microsoft patches 398 flaws, including exploited CVE-2026-68820 that lets local attackers reach SYSTEM, plus four unauthenticated 9.8 RCEs.

Microsoft says Russian hackers are exploiting public Wi-Fi networks to intercept Microsoft account logins and install malware ...

SharePoint CVE-2026-55040 lets unauthenticated attackers impersonate users and chain with CVE-2026-63520 for code execution ...

Microsoft blames Russian state-sponsored APT Midnight Blizzard for hacking hotel Wi-Fi networks to steal travelers’ ...

Hackers are compromising hotel Wi-Fi gateways to redirect business travelers to fake Microsoft 365 login pages that can ...

The 8 best agentic SOC platforms for Microsoft Sentinel in 2026, compared. What Security Copilot's agents do today, GA versus ...

A Storm-2945 campaign layers device code phishing onto hijacked hotel Wi-Fi to bypass MFA on Microsoft 365 accounts. Here's ...

Microsoft has warned travellers about CaptiveCrunch, a cyberattack campaign targeting hotel Wi-Fi and other public guest networks worldwide.The campaign can red ...

New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA prompts to maintain access.

Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that can enable low-privilege Windows accounts to make sensitive changes to ...

The sign-in prompt in Office 365 or Microsoft 365 desktop apps may say device TPM problem, Trusted Platform Module ...

Maybe feeling left out from the questionable hype train of “Our AI models can’t be trusted”, Anthropic has released reports that their Claude model has “reached the ...