After ignoring and even undermining the platform for years, Microsoft is racing to improve Windows 11 this year.

Malicious Sicoob.Sdk stole PFX certificates and client IDs via NuGet downloads, enabling API impersonation and payment abuse risks.

A new phishing tool is allowing cyber attackers to get access to Microsoft 365 users’ accounts without even needing to know ...

Microsoft Research has released Webwright as a terminal-native web agent framework that turns browser tasks into rerunnable Playwright code and logs for teams.

Reported over three years ago and allegedly still not properly fixed, the vulnerability enables attacks to execute JavaScript ...

Google recently published – and then quickly hid – a potentially dangerous bug found in the Chromium web browser. The ...

Soma Somasegar spent 27 years at Microsoft before joining the Madrona Venture Group.

Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...

A legacy Windows scripting utility tied to Internet Explorer is still being used in modern malware campaigns, researchers say ...

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

Active Microsoft Exchange zero-day leaves organisations exposed By Nicola Mawson, Contributing journalistJohannesburg, 19 May 2026An exploit in on-premises Microsoft Exchange servers has already been ...

Microsoft has revealed a new threat affecting Microsoft Exchange Servers, a zero-day vulnerability that is reportedly being exploited by hackers. This was demonstrated at the Pwn2Own Berlin hacking ...