News · via Microsoft Security Response Center
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft
Coverage tagged "Microsoft".
News · via Microsoft Security Response Center
CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability
Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected.
News · via Huntress
Introducing ITDR Lookback: Find Out Who Was in Your Microsoft 365 Tenant Before You Were
Attackers may be in your tenant before you connect it. Huntress Managed ITDR Lookback reviews 180 days of Microsoft 365 logins & our SOC acts on active incidents.
News · via Huntress
Identity Posture Assessment for Microsoft 365 | Managed ISPM
Build identity resilience with Identity Posture Assessment, an on-demand Microsoft 365 report that scores your identity defenses and shows how fast you can fix the gaps.
News · via SecurityWeek
Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises.
News · via BleepingComputer
Windows Server 2025 gets support for quick machine recovery
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update.
News · via Help Net Security
Microsoft wants to limit AI agents’ permissions when they stray from the job
Microsoft’s Guardian Agents in Project Perception adapt as agent activity, risk, security context and organizational policy change. They help security teams understand why risk changed, investigate…
News · via Security Affairs
Microsoft Treats AI Agents as Insider Threats in New Security Framework
Microsoft urges organizations to secure AI Agents as insider threats, using dynamic permissions, continuous risk monitoring and automated containment. Microsoft published a detailed blog post…
News · via arXiv cs.CR
SPIDES: Information-Flow Control for Browser Agents
arXiv:2610.24277v1 Announce Type: new Abstract: Browser agents automate complex workflows by reading and acting on arbitrary page content, but this flexibility exposes them to prompt injection…
News · via Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
News · via Dark Reading
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
News · via BleepingComputer
Microsoft fixes game, app crashes caused by recent Windows update
Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010).
News · via Check Point Research
19th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy, a US utility company serving…
News · via Microsoft Security Response Center
CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability
Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1…
News · via Microsoft Security Response Center
CVE-2026-70197 .NET Remote Code Execution Vulnerability
Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed. We are working to prepare and test a complete mitigation. We will update this document when there is…
News · via SOCRadar
ConnectWise Cloud Backup Breach: What We Know
ConnectWise is investigating unauthorized access to application identities associated with Cloud Backup, formerly SkyKick, after researchers detected the applications authenticating into customer…
News · via Help Net Security
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts…