Tag: Microsoft

Microsoft patches a critical Azure AI Foundry vulnerability rated CVSS 10.0 that could enable unauthorized privilege escalation, with no customer action required.

CISA has added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of reverse shell deployment, cryptocurrency mining, and attacks targeting AI infrastructure.

Microsoft has disclosed the TerminalFix campaign, a new ClickFix variant that uses fake Cloudflare CAPTCHA pages to deploy a reverse tunnel backdoor through Windows Terminal and PowerShell.

A security researcher has released a proof of concept for ShieldBreak, a new Microsoft Defender zero day that reportedly bypasses the RoguePlanet patch and enables SYSTEM level privilege escalation.

Microsoft plans to launch a unified Copilot AI application later this year, combining chat, coding, Cowork, and autonomous Autopilot features for consumers and businesses.

Microsoft has uncovered a cyber campaign using hijacked hotel Wi Fi networks to deliver the CornFlake remote access trojan through fake browser updates and device authentication phishing.

Microsoft has fixed a critical Azure Cosmos DB vulnerability that could have allowed attackers to obtain platform wide credentials and access databases across customer tenants.

GitHub has introduced a default three day cooldown for Dependabot version updates to help reduce the risk of poisoned software packages spreading through supply chains.

CISA has added the actively exploited Microsoft SharePoint vulnerability CVE 2026 58644 to its Known Exploited Vulnerabilities catalog and urged organizations to apply security updates immediately.

A newly unsealed U.S. court filing reveals how a persistent Windows device ID helped FBI connect an alleged Scattered Spider member to a cyber intrusion targeting a luxury jewelry retailer.

This week's cybersecurity roundup covers the disruption of the NetNut proxy botnet, AI driven attack techniques, browser based ransomware, phishing campaigns, malware activity, and critical vulnerabilities affecting organizations worldwide.

Securonix has uncovered the VEILDROP malware campaign that abuses Blogger pages, PowerShell, and trusted Microsoft binaries to deploy the PureLogs information stealer while evading traditional security defenses.