Microsoft

Microsoft’s new model helps AI agents judge their next move

Microsoft’s new model helps AI agents judge their next move 2026-10-12 at 14:02 By Anamarija Pogorelec Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each option. “This model is designed for routing, classification, prioritization, verification, and workflow control, making […]

Microsoft’s new model helps AI agents judge their next move Read More »

Windows PCs missing key updates could lose security fixes in 2027

Windows PCs missing key updates could lose security fixes in 2027 2026-10-12 at 10:39 By Anamarija Pogorelec Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows […]

Windows PCs missing key updates could lose security fixes in 2027 Read More »

October 2026 Patch Tuesday forecast: Time for an Office cleanup

October 2026 Patch Tuesday forecast: Time for an Office cleanup 2026-10-09 at 09:32 By Help Net Security September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs […]

October 2026 Patch Tuesday forecast: Time for an Office cleanup Read More »

Your Windows PC can now reach other PCs through Windows App

Your Windows PC can now reach other PCs through Windows App 2026-10-07 at 13:22 By Anamarija Pogorelec Microsoft has made remote PC connections generally available in Windows App on Windows. Users can access physical or virtual Windows PCs alongside Windows 365, Azure Virtual Desktop, and Microsoft Dev Box resources. Windows App brings remote Windows devices […]

Your Windows PC can now reach other PCs through Windows App Read More »

AI is giving attackers a head start, Microsoft warns

AI is giving attackers a head start, Microsoft warns 2026-10-02 at 15:47 By Sinisa Markovic Threat actors are using AI to find bugs, build malware and run intrusions faster than defenders can keep up. Microsoft’s 2026 Digital Defense Report, covering July 2025 to June 2026, describes a near-term period in which attackers collect the benefits […]

AI is giving attackers a head start, Microsoft warns Read More »

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data 2026-09-28 at 16:50 By Sinisa Markovic A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found […]

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data Read More »

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft 2026-09-23 at 14:23 By Eduard Kovacs The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft Read More »

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes 2026-09-23 at 11:34 By Sinisa Markovic The EvilTokens phishing service, which compromised more than 12,000 inboxes at over 10,000 organizations, has been disrupted by a coalition of law enforcement and private-sector partners led by Microsoft. With authorization from the US District Court for […]

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes Read More »

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products 2026-09-18 at 13:57 By Eduard Kovacs Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority. The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products Read More »

Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?

Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow? 2026-09-15 at 23:24 By Associated Press Microsoft agreed to adopt guardrails and privacy standards for its AI in schools, as negotiated with the American Federation of Teachers. The post Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech […]

Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow? Read More »

Microsoft sets security and safety rules for its AI models

Microsoft sets security and safety rules for its AI models 2026-09-15 at 13:50 By Anamarija Pogorelec Microsoft AI has published the first draft of its Humanist AI Code of Conduct, a training manual outlining how it develops AI models and intends them to behave during deployment. The draft is open for public consultation for six […]

Microsoft sets security and safety rules for its AI models Read More »

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints 2026-09-15 at 12:40 By Eduard Kovacs The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability. The post Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints appeared first on SecurityWeek. […]

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints Read More »

Attackers call employees’ personal phones to break into Microsoft 365 accounts

Attackers call employees’ personal phones to break into Microsoft 365 accounts 2026-09-10 at 16:26 By Sinisa Markovic Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts. Once inside, they pull files and email […]

Attackers call employees’ personal phones to break into Microsoft 365 accounts Read More »

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor 2026-09-09 at 12:04 By Zeljka Zorz September 2026 Patch Tuesday is here, with Microsoft delivering another record-breaking number of patches, including those for two vulnerabilities that have been exploited as zero-days. Another “new normal” is the anonymous security researcher Nightmare Eclipse publishing […]

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor Read More »

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days 2026-09-08 at 22:20 By Ionut Arghire The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities. The post Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days Read More »

Microsoft’s Project Zenith puts large AI models directly on developer PCs

Microsoft’s Project Zenith puts large AI models directly on developer PCs 2026-09-08 at 07:30 By Anamarija Pogorelec Microsoft’s Project Zenith is a ready-to-code Windows 11 experience for developer-class PCs capable of running AI models with more than 30 billion parameters locally without relying on metered cloud tokens. Designed for systems with at least 64 GB […]

Microsoft’s Project Zenith puts large AI models directly on developer PCs Read More »

September 2026 Patch Tuesday forecast: All we need is more time

September 2026 Patch Tuesday forecast: All we need is more time 2026-09-04 at 09:00 By Help Net Security The Patch Apocalypse is continuing unabated. We are seeing record numbers of patches being released and reported CVEs continue to grow as well. August 2026 Patch Tuesday was the second biggest in history with 398 resolved CVEs: […]

September 2026 Patch Tuesday forecast: All we need is more time Read More »

Windows memory integrity switches on automatically for eligible devices in October 2026

Windows memory integrity switches on automatically for eligible devices in October 2026 2026-09-03 at 07:30 By Anamarija Pogorelec Beginning in October 2026, Windows quality updates start enabling memory integrity protection on eligible devices with little or no additional configuration. On machines where Virtualization-based Security is not already running, those same updates enable VBS too. Memory […]

Windows memory integrity switches on automatically for eligible devices in October 2026 Read More »

Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)

Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911) 2026-09-02 at 16:24 By Sinisa Markovic Nearly 22,000 Microsoft Exchange servers remain unpatched against CVE-2026-62911, a critical authentication bypass vulnerability, according to daily scans from the Shadowserver Foundation. The United States and Germany top the list with 6,200 and 5,100 unpatched servers. CVE-2026-62911 […]

Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911) Read More »

Scroll to Top