Security News

Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes
2025-02-20 23:55

Said bugs 'can have significant implications' – glad to hear that from Redmond Microsoft is so concerned about security in its Copilot products for folks that it’s lifted bug bounty payments for...

Oops, some of our customers' Power Pages-hosted sites were exploited, says Microsoft
2025-02-20 23:17

Don't think this is SaaS and you can relax: Redmond wants a few of you to check your websites Microsoft has fixed a security flaw in its Power Pages website-building SaaS, after criminals got...

Microsoft fixes Power Pages zero-day bug exploited in attacks
2025-02-20 14:34

Microsoft has issued a security bulletin for a high-severity elevation of privilege vulnerability in Power Pages, which hackers exploited as a zero-day in attacks. [...]

Microsoft testing fix for Windows 11 bug breaking SSH connections
2025-02-20 13:19

Microsoft is not testing a fix for a longstanding known issue that is breaking SSH connections on some Windows 11 22H2 and 23H2 systems. [...]

Microsoft's End of Support for Exchange 2016 and 2019: What IT Teams Must Do Now
2025-02-20 10:00

For decades, Microsoft Exchange has been the backbone of business communications, powering emailing, scheduling and collaboration for organizations worldwide. Whether deployed on-premises or in...

Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability
2025-02-20 04:29

Microsoft has released security updates to address two Critical-rated flaws impacting Bing and Power Pages, including one that has come under active exploitation in the wild. The vulnerabilities...

Duo vs Microsoft Authenticator: Which Tool Is Better?
2025-02-19 13:00

Is Duo better than Microsoft Authenticator? Which one is safer to use? Read our guide to learn more about security, pros, cons, and more.

Microsoft reminds admins to prepare for WSUS driver sync deprecation
2025-02-18 19:20

Microsoft once again reminded IT administrators that driver synchronization in Windows Server Update Services (WSUS) will be deprecated on April 18, just 60 days from now. [...]

Chinese hackers abuse Microsoft APP-v tool to evade antivirus
2025-02-18 18:00

The Chinese APT hacking group "Mustang Panda" has been spotted abusing the Microsoft Application Virtualization Injector utility as a LOLBIN to inject malicious payloads into legitimate processes...

Microsoft to remove the Location History feature in Windows
2025-02-17 18:50

Microsoft announced the deprecation of the Location History feature from Windows, which let applications like the Cortana virtual assistant to fetch location history of the device. [...]