Overview A financially motivated threat actor known as Fox Tempest has been operating a malware‑signing‑as‑a‑service (MSaaS) platform that abused Microsoft’s Artifact Signing infrastructure to generate trusted digital […]
Overview CISA has issued a warning about CVE‑2026‑42897, a cross‑site scripting (XSS) vulnerability in Microsoft Exchange Server’s Outlook Web Access (OWA). Already added to the […]
Pwn2Own Berlin 2026 is proving to be one of the most intense offensive security contests in recent memory. Day Two alone delivered 15 new zero‑day […]
Overview Microsoft has disclosed a new vulnerability in on‑premises Exchange Server, tracked as CVE‑2026‑42897 (CVSS 8.1). The flaw, stemming from a cross‑site scripting (XSS) bug, […]
Overview Microsoft has disclosed a critical flaw in the Windows DNS Client, tracked as CVE‑2026‑41096, with a CVSS score of 9.8. This vulnerability allows attackers […]
Overview A newly disclosed tool called BitUnlocker demonstrates a practical downgrade attack against Microsoft’s BitLocker encryption. By exploiting a gap between patching and certificate revocation, […]
Overview A trending Hugging Face repository named “Open‑OSS/privacy‑filter” was discovered hiding malware targeting Windows machines. Before removal, it had amassed 200,000+ downloads, tricking developers by […]
Overview On May 7, 2026, Microsoft disclosed and fully remediated three critical information disclosure vulnerabilities affecting Microsoft 365 Copilot and Copilot Chat in Microsoft Edge. […]
Overview Conditional Access in Microsoft Entra ID (formerly Azure AD) is designed to enforce identity and device trust before granting access. But a recent red […]
Overview Researchers have uncovered a new variant of the CloudZ remote access tool (RAT) that deploys a malicious plugin called Pheno. This plugin hijacks the […]
Copyright © 2026 | WordPress Theme by MH Themes