While the total number of vulnerabilities addressed in the monthly release of Microsoft security updates is modest, there’s a comparatively high number of Office-related bugs fixed in the release, ...

The 130 CVEs (Common Vulnerabilities and Exposures) disclosed in Microsoft’s monthly release of security fixes includes a remote code execution flaw that ‘definitely’ should be prioritized for ...

Overview On September 10, NSFOCUS CERT detected that Microsoft released the September Security Update patch, fixing 86 security issues involving widely used products such as Windows, Microsoft Office, ...

A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access ...

We've reported a number of sophisticated cyberattacks where threat actors circumvent 2FA restrictions. In response to the increased vulnerability of passwords, Microsoft has announced a major change ...

Microsoft gave new details about its security initiatives on Monday morning, less than five months after CEO Satya Nadella and security leader Charlie Bell outlined a series of reforms to address ...

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Yesterday was Patch Tuesday for Microsoft, which means tons of security updates across the company’s products and services. Specifically, 107 new security vulnerabilities have been patched. Microsoft ...

The controversial Microsoft Windows Recall AI app may still be in need of security work according to testing from the UK technology site, The Register. The app, which takes screenshots of everything ...