Security News

Microsoft: Some devices offered Windows 11 upgrades despite Intune blocks
2025-04-16 10:31

Microsoft is working to fix an ongoing issue causing some users' Windows devices to be offered Windows 11 upgrades despite Intune policies preventing them. [...]

Microsoft blocks ActiveX by default in Microsoft 365, Office 2024
2025-04-15 16:57

Microsoft announced it will begin disabling all ActiveX controls in Windows versions of Microsoft 365 and Office 2024 applications later this month. [...]

Microsoft: Exchange 2016 and 2019 reach end of support in six months
2025-04-15 15:07

​Microsoft warned that Exchange 2016 and Exchange 2019 will reach the end of support six months from now, on October 14. [...]

Microsoft warns of CPU spikes when typing in classic Outlook
2025-04-15 13:41

Microsoft warned Windows users of increased CPU usage when typing while using recent versions of the classic Outlook email client. [...]

ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?
2025-04-15 12:25

Stopping users shooting themselves in the foot with last century's tech Microsoft has twisted the knife into ActiveX once again, setting Microsoft 365 to disable all controls without so much as a prompt.…

Microsoft tells Windows users to ignore 0x80070643 WinRE errors
2025-04-14 13:28

Microsoft says some users might see 0x80070643 installation failures when trying to deploy the April 2025 Windows Recovery Environment (WinRE) updates. [...]

Microsoft: New Windows updates fix Active Directory policy issues
2025-04-14 11:52

Microsoft has released emergency Windows updates to address a known issue affecting local audit logon policies in Active Directory Group Policy. [...]

Microsoft: Windows Server 2025 restarts break connectivity on some DCs
2025-04-14 10:54

Microsoft warned IT admins that some Windows Server 2025 domain controllers might become inaccessible after a restart, causing apps and services to fail or remain unreachable. [...]

Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixed
2025-04-13 08:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824) April 2025 Patch Tuesday...

Tycoon2FA phishing kit targets Microsoft 365 with new tricks
2025-04-12 15:16

Phishing-as-a-service (PhaaS) platform Tycoon2FA, known for bypassing multi-factor authentication on Microsoft 365 and Gmail accounts, has received updates that improve its stealth and evasion...