Microsoft

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model 

AI, AI model, Artificial Intelligence, MAI-Cyber-1-Flash, Microsoft /

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model  2026-07-28 at 14:11 By Eduard Kovacs The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing. The post Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model  Read More »

Microsoft unveils MAI-Cyber-1-Flash, promises cybersecurity AI at half the cost

agentic AI, AI, cybersecurity, Microsoft, News /

Microsoft unveils MAI-Cyber-1-Flash, promises cybersecurity AI at half the cost 2026-07-27 at 22:23 By Sinisa Markovic Microsoft has introduced MAI-Cyber-1-Flash, a security-focused AI model built into MDASH, the company’s multi-agent vulnerability identification and remediation system. MAI-Cyber-1-Flash is Microsoft’s first model built specifically for cybersecurity work, and the company stated that it went through review by

Microsoft unveils MAI-Cyber-1-Flash, promises cybersecurity AI at half the cost Read More »

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

Active Directory, Don't miss, enterprise, exploit, Hot stuff, Microsoft, News, PoC, vulnerability, Windows, Windows Server /

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121) 2026-07-27 at 15:04 By Zeljka Zorz Security researchers who discovered and reported CVE-2026-54121 (aka “Certighost”), a critical privilege elevation vulnerability in Active Directory Certificate Services (AD CS), have released a proof-of-concept (PoC) exploit for and technical details related to the flaw. The vulnerability AD CS

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121) Read More »

Microsoft tightens Windows enterprise activation security

identity verification, Microsoft, News, servers, Windows, Windows Server /

Microsoft tightens Windows enterprise activation security 2026-07-24 at 12:52 By Anamarija Pogorelec Microsoft is making Trusted Platform Module (TPM)-backed attestation a requirement for Windows Key Management Service (KMS), the on-premises service used for Windows volume activation, replacing the software-only trust model with hardware-backed verification to strengthen enterprise activation security. Attestation will become mandatory with the

Microsoft tightens Windows enterprise activation security Read More »

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform

Don't miss, GitHub, Microsoft, network, News, open source, software, traffic monitoring /

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform 2026-07-20 at 09:00 By Anamarija Pogorelec Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own. A new open-source project from Microsoft supplies that infrastructure in a package

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform Read More »

Microsoft makes Windows SSO prompts easier to manage

authentication, cybersecurity, Microsoft, Microsoft Entra ID, News, policy, SSO, Windows /

Microsoft makes Windows SSO prompts easier to manage 2026-07-16 at 11:47 By Anamarija Pogorelec Microsoft is introducing a new registry-based policy that lets IT administrators automatically accept Windows SSO permissions on Windows 11 versions 24H2 and 25H2 devices managed with Microsoft Entra ID. Users with personal Microsoft accounts and devices outside policy-managed environments will continue

Microsoft makes Windows SSO prompts easier to manage Read More »

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process

GitHub, Microsoft, News, programming, software /

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process 2026-07-16 at 10:45 By Anamarija Pogorelec Developers who lean on AI coding agents often keep several editor windows open at once, each tied to its own session. The 1.129 release of Visual Studio Code reworks that setup with a dedicated agent host.

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process Read More »

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days

exploited, Microsoft, Patch Tuesday, Vulnerabilities, Zero-Day /

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days 2026-07-14 at 21:50 By Ionut Arghire Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed. The post Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek. This article is an excerpt

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days Read More »

No one knows how many old shims can still bypass UEFI Secure Boot

cybersecurity, Don't miss, ESET, Microsoft, News, PowerShell, research, vulnerability /

No one knows how many old shims can still bypass UEFI Secure Boot 2026-07-14 at 13:26 By Mirko Zorz The vast majority of UEFI computers carry a Microsoft certificate that will trust a small first-stage loader called a shim, a program Microsoft signs so that Linux and assorted boot tools can run with Secure Boot

No one knows how many old shims can still bypass UEFI Secure Boot Read More »

Microsoft Entra ID authentication overhaul to start in September 2026

authentication, MFA, Microsoft, Microsoft Entra ID, News, passkeys /

Microsoft Entra ID authentication overhaul to start in September 2026 2026-07-14 at 11:49 By Anamarija Pogorelec Microsoft will begin rolling out passkeys as the default authentication experience for Microsoft Entra ID in the public cloud on September 1, 2026. Organizations with SMS or voice authentication enabled will automatically be enabled for passkeys. The next time

Microsoft Entra ID authentication overhaul to start in September 2026 Read More »

Fake OAuth client IDs are helping attackers slip past sign-in logs

authentication, credentials, cybercrime, Don't miss, Microsoft, Microsoft Entra ID, News, OAuth, Proofpoint, spoofing /

Fake OAuth client IDs are helping attackers slip past sign-in logs 2026-07-13 at 15:10 By Mirko Zorz Attackers running account enumeration against Microsoft cloud tenants have added a step that keeps their probing out of the usual telemetry. They spoof the OAuth client ID, the globally unique identifier assigned to an application and passed as

Fake OAuth client IDs are helping attackers slip past sign-in logs Read More »

Microsoft demystifies how Windows updates work

cybersecurity, Don't miss, Hot stuff, Microsoft, News, Patch Tuesday, security update, Windows /

Microsoft demystifies how Windows updates work 2026-07-13 at 08:30 By Anamarija Pogorelec Microsoft has published a guide explaining the Windows servicing model, outlining the purpose of monthly security updates, optional preview releases, hotpatch updates, and the mechanisms used to deliver new features throughout the year. “Most individuals and organizations regularly deploy monthly security updates, released

Microsoft demystifies how Windows updates work Read More »

July 2026 Patch Tuesday forecast: Is CVE tracking still practical?

CVE, Don't miss, Expert analysis, Expert corner, Hot stuff, Ivanti, Microsoft, News, Patch Tuesday /

July 2026 Patch Tuesday forecast: Is CVE tracking still practical? 2026-07-10 at 10:30 By Help Net Security I was off by a month in my forecast of record-setting CVE releases from Microsoft. In June, we saw the deluge of over 200 reported CVEs that I expected in May. There were 116 CVEs for Windows 11

July 2026 Patch Tuesday forecast: Is CVE tracking still practical? Read More »

Microsoft is rewriting Windows patch guidance because of AI

AI, Don't miss, Microsoft, Microsoft 365, News, patching, security update, Windows /

Microsoft is rewriting Windows patch guidance because of AI 2026-07-10 at 09:00 By Anamarija Pogorelec Microsoft is recommending that organizations shorten Windows update deployment timelines, warning that advances in AI are reducing the time attackers need to identify and exploit vulnerabilities after security updates are released. The company says organizations should reassess how quickly they

Microsoft is rewriting Windows patch guidance because of AI Read More »

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)

Don't miss, exploit, Hot stuff, Microsoft, Microsoft Defender, News, security update, vulnerability disclosure /

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) 2026-07-09 at 15:14 By Zeljka Zorz Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution before

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) Read More »

20 open-source cybersecurity tools to keep your team ready for anything

agentic AI, AI, Application Security, containers, cybersecurity, Don't miss, Endpoint Security, Exabeam, firewall, GitHub, Hot stuff, LLMs, Microsoft, News, open source, OWASP, penetration testing, scanner, security telemetry, software, vulnerability assessment, Windows /

20 open-source cybersecurity tools to keep your team ready for anything 2026-07-08 at 08:30 By Anamarija Pogorelec AI is changing how security teams find vulnerabilities, analyze code, test applications, and protect infrastructure. Developers are building tools to secure AI systems themselves, from coding agents and memory protection to model exposure discovery. This roundup covers recent

20 open-source cybersecurity tools to keep your team ready for anything Read More »

Microsoft wants to keep your AI agents from going rogue

Don't miss, Microsoft, News, Windows /

Microsoft wants to keep your AI agents from going rogue 2026-07-07 at 07:45 By Anamarija Pogorelec Microsoft has introduced Microsoft Execution Containers (MXC), a cross-platform, policy-driven execution layer for AI agents on Windows and Windows Subsystem for Linux (WSL), now available in early preview. Updated Agent 365 platform (Source: Microsoft) Developers can define constraints for

Microsoft wants to keep your AI agents from going rogue Read More »

Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings

Artificial Intelligence, cybercrime, Microsoft /

Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings 2026-07-01 at 21:08 By Ionut Arghire Microsoft’s new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and control over automated participants in sensitive meetings. The post Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From

Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings Read More »

Microsoft wants to stop unwanted bots from entering Teams meetings

bot, identity verification, Microsoft, Microsoft Teams, News, policy /

Microsoft wants to stop unwanted bots from entering Teams meetings 2026-07-01 at 07:30 By Anamarija Pogorelec A new Microsoft Teams admin policy, Manage external bots and their access to meetings, gives organizations greater visibility and control over external bots in meetings. The policy identifies bots and applies safeguards before they are admitted. Microsoft will begin

Microsoft wants to stop unwanted bots from entering Teams meetings Read More »

Microsoft gives Windows 10 users an unexpected extra year of free security updates

Microsoft, News, security update, Windows /

Microsoft gives Windows 10 users an unexpected extra year of free security updates 2026-06-26 at 09:32 By Sinisa Markovic Microsoft has given Windows 10 users another year of free security updates, extending its consumer Extended Security Updates (ESU) program until October 12, 2027. “Windows 10 support has ended. You can enroll in ESU any time

Microsoft gives Windows 10 users an unexpected extra year of free security updates Read More »

Scroll to Top