Microsoft has released emergency security updates to patch a high-severity Office zero-day vulnerability exploited in attacks ...

Microsoft releases an urgent out-of-band update for a critical Office zero-day flaw already exploited in real-world attacks.

Varonis Threat Labs has published a report detailing a now patched security exploit discovered in Copilot that let attackers ...

Microsoft has patched 112 vulnerabilities in January 2026, including CVE-2026-20805, a Desktop Window Manager zero-day that ...

Microsoft issues emergency patch for a critical WSUS flaw enabling remote code execution CVE-2025-59287 allows unauthenticated attackers to gain SYSTEM privileges without user interaction An ...

Discover four key identity and access priorities for the new year to strengthen your organization's identity security ...

See how three organizations strengthen security and accelerate AI innovation with Microsoft’s family of security products.

Update, August 10, 2025: This story, originally published on August 7, has been updated with additional information following a demonstration of the shared service principal exploit at the Black Hat ...

Microsoft has released Security Baseline v2512 for Microsoft 365 Apps with enhanced Excel and PowerPoint protections, blocking unsafe external links and legacy automation components.

CISA has mandated immediate mitigation for federal agencies, while analysts urge enterprises to accelerate cloud migration and implement live threat detection. Attackers are exploiting a previously ...