Microsoft Investigates MFA Setup Failure
Overview Microsoft is investigating a service disruption affecting users attempting to set up multi‑factor authentication (MFA) or access the My Sign‑Ins portal at mysignins.microsoft.com. The issue […]
MICROSOFT
Microsoft Confirms Domain Controller Lookup Failures on Windows Server 2016
Overview Microsoft has acknowledged a new known issue affecting Windows Server 2016 systems following the installation of the KB5087537 May 2026 security update. The bug causes domain controller […]
Beware of the Fake “Microsoft” Verification Code Scam
Overview A new wave of device code phishing attacks is targeting Microsoft 365 users across the US, Canada, and Europe, compromising over 340 organizations. These emails […]
Windows 11 Updates Trigger Unexpected BitLocker Recovery Prompts
Overview Microsoft has confirmed a known issue in its April 2026 Patch Tuesday updates that may force Windows 11 users to enter their BitLocker recovery […]
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Overview Microsoft has confirmed that two Microsoft Defender vulnerabilities are being actively exploited in the wild, prompting urgent patch releases for all Windows endpoints. The flaws […]
Microsoft Warns of New Defender Zero‑Days Exploited in Active Attacks
Overview Microsoft has confirmed that two zero‑day vulnerabilities in Microsoft Defender for Endpoint are being actively exploited in the wild. The company began rolling out emergency patches […]
Microsoft Shares Mitigation for YellowKey Windows Zero‑Day
Overview Microsoft has published mitigation guidance for YellowKey, a newly disclosed Windows BitLocker zero‑day vulnerability that allows attackers to gain access to encrypted drives. The flaw, […]
Fox Tempest — Malware‑Signing‑as‑a‑Service Exploits Microsoft Artifact Signing
Overview A financially motivated threat actor known as Fox Tempest has been operating a malware‑signing‑as‑a‑service (MSaaS) platform that abused Microsoft’s Artifact Signing infrastructure to generate trusted digital […]
Exchange XSS Exploit — Layer 7 Threat to Enterprise Networks
Overview CISA has issued a warning about CVE‑2026‑42897, a cross‑site scripting (XSS) vulnerability in Microsoft Exchange Server’s Outlook Web Access (OWA). Already added to the […]
Microsoft Exchange, Windows 11, and Cursor Zero‑Days Exploited on Pwn2Own Day 2
Pwn2Own Berlin 2026 is proving to be one of the most intense offensive security contests in recent memory. Day Two alone delivered 15 new zero‑day […]