During the IFA 2026 exhibition, Mark Linton, Microsoft Corporate Vice President of Windows and Devices, revisited a classic promise. Forty years ago, founder Bill Gates vowed to put a computer on …

A user may enter the correct password, complete MFA verification, and still lose their Microsoft 365 account. The phishing platform BigBear 2.0 intercepts the authenticated session after the secon…

Threat actors are actively compromising executive accounts using highly targeted Microsoft 365 vishing attacks. The PREY-0058 extortion campaign bypasses traditional multi-factor authentication to…

At a glance Microsoft threat analysts reported active cloud intrusions utilizing passkey social engineering to breach enterprise tenants on September 9, 2026. These targeted campaigns combine voic…

The September Patch Tuesday became the largest security update release in Microsoft’s history. The company closed 966 vulnerabilities, two of which attackers had already wielded in real-worl…

Microsoft is developing an age-awareness API for Windows 11 to satisfy the age-rating verification mandates emerging across various countries and states. At its heart, Microsoft itself gathers the…

At a glance Field Details Actor or Group Unattributed cybercrime operators Activity Type Email filter evasion, credential harvesting, and business loan fraud Targets or Victims Corporate employees…

Executive Summary

An independent technical analysis of the latest Microsoft Defender patch-bypass research, what the public PoC actually demonstrates, and…

This week, Microsoft released its latest security updates for every supported product, and the various components of Microsoft 365 within its office suite received them too. However, the security …