Fake job interview opened the door to $6.34 billion Binance heist 2026-11-04 at 12:29 By Sinisa Markovic A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a single isolated breach or a simple phishing incident,” Binance […]
Fake job interview opened the door to $6.34 billion Binance heist Read More »
Microsoft Authenticator vulnerability let rogue Android apps steal work account access 2026-10-27 at 08:14 By Mirko Zorz If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app didn’t need permissions, and you didn’t need to […]
Microsoft Authenticator vulnerability let rogue Android apps steal work account access Read More »
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks 2026-10-23 at 13:31 By Ionut Arghire The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks Read More »
Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop […]
Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring 2026-10-20 at 14:30 By Eduard Kovacs Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises. The post Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring appeared […]
Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring Read More »
Microsoft wants to limit AI agents’ permissions when they stray from the job 2026-10-20 at 12:55 By Anamarija Pogorelec Microsoft’s Guardian Agents in Project Perception adapt as agent activity, risk, security context and organizational policy change. They help security teams understand why risk changed, investigate relevant evidence, recommend or apply containment measures and use what […]
Microsoft wants to limit AI agents’ permissions when they stray from the job Read More »
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access 2026-10-19 at 16:58 By Zeljka Zorz American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised credential belonging to the ConnectWise […]
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access Read More »
With open-weight AI, more of the security burden falls on enterprises 2026-10-19 at 14:04 By Sinisa Markovic Organizations that run open-weight AI models on their own infrastructure may have to supply safety and security controls that an AI provider would otherwise handle for them, Microsoft and NVIDIA warn in a joint paper on managing the […]
With open-weight AI, more of the security burden falls on enterprises Read More »
Microsoft Patches Two Dozen RCE Flaws in Office 2026-10-16 at 10:55 By Ionut Arghire In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Microsoft Patches Two Dozen RCE Flaws in Office Read More »
Microsoft disrupts phishing network behind more than a billion scam messages 2026-10-15 at 13:10 By Anamarija Pogorelec Microsoft uncovered a criminal marketplace supplying tools and accounts used in phishing scams worldwide. Attackers used these resources to target organizations in healthcare, financial services, wholesale distribution, and IT across Japan, the United States, Australia, and India. Phishing […]
Microsoft disrupts phishing network behind more than a billion scam messages Read More »
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages 2026-10-14 at 16:00 By Eduard Kovacs Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages Read More »
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 2026-10-14 at 10:16 By Eduard Kovacs The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek. This article is an excerpt from […]
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day Read More »
Microsoft’s new model helps AI agents judge their next move 2026-10-12 at 14:02 By Anamarija Pogorelec Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each option. “This model is designed for routing, classification, prioritization, verification, and workflow control, making […]
Microsoft’s new model helps AI agents judge their next move Read More »
Windows PCs missing key updates could lose security fixes in 2027 2026-10-12 at 10:39 By Anamarija Pogorelec Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows […]
Windows PCs missing key updates could lose security fixes in 2027 Read More »
October 2026 Patch Tuesday forecast: Time for an Office cleanup 2026-10-09 at 09:32 By Help Net Security September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs […]
October 2026 Patch Tuesday forecast: Time for an Office cleanup Read More »
Your Windows PC can now reach other PCs through Windows App 2026-10-07 at 13:22 By Anamarija Pogorelec Microsoft has made remote PC connections generally available in Windows App on Windows. Users can access physical or virtual Windows PCs alongside Windows 365, Azure Virtual Desktop, and Microsoft Dev Box resources. Windows App brings remote Windows devices […]
Your Windows PC can now reach other PCs through Windows App Read More »
AI is giving attackers a head start, Microsoft warns 2026-10-02 at 15:47 By Sinisa Markovic Threat actors are using AI to find bugs, build malware and run intrusions faster than defenders can keep up. Microsoft’s 2026 Digital Defense Report, covering July 2025 to June 2026, describes a near-term period in which attackers collect the benefits […]
AI is giving attackers a head start, Microsoft warns Read More »
Crypto Scammers Hijack Microsoft’s Official X Account 2026-10-02 at 14:46 By Eduard Kovacs Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. The post Crypto Scammers Hijack Microsoft’s Official X Account appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Crypto Scammers Hijack Microsoft’s Official X Account Read More »
16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data 2026-09-28 at 16:50 By Sinisa Markovic A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found […]
AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft 2026-09-23 at 14:23 By Eduard Kovacs The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft Read More »