CloudZ RAT Exploits Microsoft Phone Link to Steal OTPs
Overview Researchers have uncovered a new variant of the CloudZ remote access tool (RAT) that deploys a malicious plugin called Pheno. This plugin hijacks the […]
MICROSOFT
Microsoft Defender False Positive Flags DigiCert Root Certificates
Overview A faulty Microsoft Defender antimalware signature update released around April 30, 2026, mistakenly flagged two legitimate DigiCert root certificates as malware. The detection, labeled […]
Windows 11 April 2026 Update Breaks Third‑Party Backup Tools
Overview Microsoft’s April 2026 cumulative security update (KB5083769) for Windows 11 has introduced a serious regression in the Volume Shadow Copy Service (VSS), disrupting third‑party […]
ConsentFix v3 — Automated OAuth Abuse Against Azure
Overview A new attack technique, ConsentFix v3, has emerged on hacker forums as an automated evolution of earlier OAuth phishing methods. Building on ClickFix and […]
Microsoft Fixes Remote Desktop Security Warning Bug
Overview Microsoft has released a fix for a known issue that caused newly introduced Remote Desktop (.rdp) security warnings to display incorrectly on Windows systems. […]
Windows Remote Desktop Cache — The Hidden Screenshot Risk
Overview Recent research from SCYTHE Labs has revealed a subtle but serious exposure in Windows Remote Desktop Protocol (RDP). Every time a user connects via […]
Microsoft Outlook Outage Forces iPhone Users to Reauthenticate
On April 27, 2026, Microsoft resolved a widespread Outlook.com outage that disrupted access for users worldwide. While service health has since returned to normal, the […]
Entra Agent ID Administrator Role Exploited — Lessons in Privilege Boundaries
In April 2026, Microsoft patched a critical scope overreach vulnerability in the Entra Agent Identity Platform. The flaw centered on the newly introduced Agent ID […]
Microsoft Issues Emergency Fixes for Critical ASP.NET Core Vulnerability
Overview Microsoft has released out‑of‑band (OOB) security updates to patch a critical flaw in ASP.NET Core Data Protection APIs. The vulnerability, tracked as CVE‑2026‑40372, could […]
Exchange Online Migration Incident EX1280763: Stuck Sync States and Resource Errors
Overview Microsoft has announced incident EX1280763, confirming that migrations to and from Exchange Online — including tenant‑to‑tenant onboarding and offboarding — are currently failing. Admins […]