Latest coverage for Microsoft

One in six machines still run the old OS as migration stalls and patch deadlines creep closer

Mega hardware vendor reports problems - but Windows maker isn't yet naming affected models

Experts say it’s a useful post-compromise tool, for those with the brain cells required to put it together

Remember when last month's 206 CVEs seemed eye-watering? Yeah, those were the days

Microsoft says GigaWiper combines at least 3 malware families into one modular tool

More patches mean more reasons to buy Redmond’s auto-patching tools

Weeks after the exploit code dropped, Redmond has finally ships a fix for the Defender zero-day

Along with other telemetry, Windows GDID makes online activity more traceable

Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping EtherRAT trojan

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers

Allows ISVs to put their names on the door so desirable bots always get in

In the Azure Edition, of course

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

200+ C2 servers linked to StealC and Amadey shut down

Infosec buffs say Windows users could have been infected with a nasty trojan, while Mac users got off lightly

Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine corporate collaboration

Connectivity checker trips browser alarms thanks to lapsed security paperwork

And it was Microsoft Copilot that unwittingly revealed the longstanding vulnerability

And it was Microsoft Copilot that unwittingly revealed the longstanding vulnerability

Another day, another Windows exploit code