Security news aggregator

Latest coverage for Microsoft

Microsoft software and cloud platforms underpin enterprise systems, so vulnerabilities and security advisories can affect identity, data, and operations.

8 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Microsoft is a technology company whose Windows, Microsoft 365, Azure, identity services, and developer tools form a widely deployed enterprise computing ecosystem. Its security relevance spans endpoint and server software, cloud control planes, authentication, collaboration data, and the update mechanisms used to maintain them.

Security news under this tag commonly concerns vulnerabilities requiring patching, exploits against exposed services, identity or token compromise, and misconfiguration of cloud permissions or authentication policies. Practitioners should verify affected versions and exposure, apply updates or mitigations, enforce multifactor authentication and least privilege, and monitor relevant audit logs. Incidents involving Microsoft-hosted identities or data may require rapid session and credential containment, investigation across cloud and on-premises systems, and assessment of privacy or regulatory obligations.

Showing 8 most recent headlines Filtered view
Bank Info Security 2 years, 1 month ago

Microsoft, Palo Alto, CrowdStrike Lead XDR Forrester Wave

Palo Alto Networks Reaches Leaderboard While Trend Micro Falls to Strong PerformerThe XDR market has matured significantly, Forrester found. Leading vendors such as Microsoft, Palo Alto Networks and CrowdStrike are supporting diverse telemetry sources and developing strategies to replace traditional SIEM tools. These advancements give better detection quality and cost management.

Bank Info Security 2 years, 1 month ago

Visual Studio Code Has a Malicious Extension Problem

Researchers Infiltrate Major Organizations Using Fake ExtensionCybersecurity researchers say an experiment in developing a fake, malicious extension for Microsoft's Visual Studio Code, the world's most popular integrated development environment, succeeded beyond their wildest expectations. VSCode doesn't manage permissions or visibility, the researchers said.

Bank Info Security 2 years, 1 month ago

Microsoft President Admits to Major Security Failures

Brad Smith Says the Tech Giant 'Accepts Responsibility' for Cyber BreachesMicrosoft President Brad Smith testified Thursday to the House Homeland Security Committee that the tech giant "accepts responsibility" for a series of security failures identified in a federal report following multiple high-profile cyberattacks targeting government agencies and major organizations.

AI Integration Boosts Siri's User Writing Tools As Apple Plays Catch Up to RivalsApple partnered with OpenAI to integrate ChatGPT into Siri and introduce artificial intelligence capabilities through free access with privacy protections as well as optional paid features. The move is intended to help Apple keep up with competitors like Google and Microsoft.

Bank Info Security 2 years, 1 month ago

Microsoft, Google Offering Cyber Help to Rural Hospitals

Vendors' Free, Discounted Services Part of Biden's Health Sector Cyber InitiativeGoogle and Microsoft have agreed to provide free or highly discounted cyber assistance to rural and critical-access hospitals to support of an evolving strategy from the White House aimed at bolstering cybersecurity in the healthcare sector in the face of rising attacks.

Bank Info Security 2 years, 1 month ago

Microsoft Now Promises Extra Security for AI-Driven Recall

Concerns Remain Over Screenshot-Capture Feature and Microsoft's Security PracticesHow in the world has Microsoft's leadership managed to get the debut of its forthcoming Recall feature for Windows so wrong on the security and privacy fronts? In the face of serious concerns, Redmond has belatedly promised multiple enhancements, but serious questions remain unanswered.