Microsoft Patch Tuesday September 2026 set a record with 966 vulnerabilities patched, but security analysts say an ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

Attackers chain two PaperCut NG and MF flaws for unauthenticated remote code execution, with limited exploitation seen in two ...

Attackers are impersonating popular AI brands like Perplexity, Claude, ChatGPT, and Copilot to spread information stealers, backdoors, malicious browser extensions, and other malware, according to ...

A StopAndProtect cybercrime campaign compromised nearly 2,000 WordPress websites, turning them into infrastructure to spread malware, steal data and control infected devices ...

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based ...

Threat actors are increasingly exploiting overlooked Active Directory service principal name misconfigurations, making ...

Ontinue’s Cyber Defense Center has identified a Python-based implant that keeps most of its command traffic inside Microsoft services, making malicious activity resemble normal Microsoft 365 use.

Generally available changes eliminate service-specific subnet quotas and separate vCore limits by hardware generation, giving administrators more granular control over regional capacity.

Microsoft is giving IT teams an early look at its next annual Windows 11 feature update while introducing a new Windows Autopilot capability designed to establish trust in corporate devices before ...

August’s Patch Tuesday is a big one: 751 fixes, an exploited WinSock flaw and plenty of critical Windows, Office and Exchange issues.

A toolkit shaped by decades of Unix history makes technical work second nature on Linux.