Beware of the Fake “Microsoft” Verification Code Scam
Overview A new wave of device code phishing attacks is targeting Microsoft 365 users across the US, Canada, and Europe, compromising over 340 organizations. These emails […]
MICROSOFT
Windows 11 Updates Trigger Unexpected BitLocker Recovery Prompts
Overview Microsoft has confirmed a known issue in its April 2026 Patch Tuesday updates that may force Windows 11 users to enter their BitLocker recovery […]
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Overview Microsoft has confirmed that two Microsoft Defender vulnerabilities are being actively exploited in the wild, prompting urgent patch releases for all Windows endpoints. The flaws […]
Microsoft Warns of New Defender Zero‑Days Exploited in Active Attacks
Overview Microsoft has confirmed that two zero‑day vulnerabilities in Microsoft Defender for Endpoint are being actively exploited in the wild. The company began rolling out emergency patches […]
Microsoft Shares Mitigation for YellowKey Windows Zero‑Day
Overview Microsoft has published mitigation guidance for YellowKey, a newly disclosed Windows BitLocker zero‑day vulnerability that allows attackers to gain access to encrypted drives. The flaw, […]
Fox Tempest — Malware‑Signing‑as‑a‑Service Exploits Microsoft Artifact Signing
Overview A financially motivated threat actor known as Fox Tempest has been operating a malware‑signing‑as‑a‑service (MSaaS) platform that abused Microsoft’s Artifact Signing infrastructure to generate trusted digital […]
Exchange XSS Exploit — Layer 7 Threat to Enterprise Networks
Overview CISA has issued a warning about CVE‑2026‑42897, a cross‑site scripting (XSS) vulnerability in Microsoft Exchange Server’s Outlook Web Access (OWA). Already added to the […]
Microsoft Exchange, Windows 11, and Cursor Zero‑Days Exploited on Pwn2Own Day 2
Pwn2Own Berlin 2026 is proving to be one of the most intense offensive security contests in recent memory. Day Two alone delivered 15 new zero‑day […]
On‑Prem Microsoft Exchange Server CVE‑2026‑42897 Actively Exploited
Overview Microsoft has disclosed a new vulnerability in on‑premises Exchange Server, tracked as CVE‑2026‑42897 (CVSS 8.1). The flaw, stemming from a cross‑site scripting (XSS) bug, […]
Windows DNS Client Vulnerability Enables Remote Code Execution
Overview Microsoft has disclosed a critical flaw in the Windows DNS Client, tracked as CVE‑2026‑41096, with a CVSS score of 9.8. This vulnerability allows attackers […]