Microsoft has released emergency security updates to patch a high-severity Office zero-day vulnerability exploited in attacks ...

Varonis Threat Labs has published a report detailing a now patched security exploit discovered in Copilot that let attackers ...

See how three organizations strengthen security and accelerate AI innovation with Microsoft’s family of security products.

Microsoft has patched 112 vulnerabilities in January 2026, including CVE-2026-20805, a Desktop Window Manager zero-day that ...

Discover four key identity and access priorities for the new year to strengthen your organization's identity security ...

Microsoft issues emergency patch for a critical WSUS flaw enabling remote code execution CVE-2025-59287 allows unauthenticated attackers to gain SYSTEM privileges without user interaction An ...

Microsoft has released Security Baseline v2512 for Microsoft 365 Apps with enhanced Excel and PowerPoint protections, blocking unsafe external links and legacy automation components.

Update, August 10, 2025: This story, originally published on August 7, has been updated with additional information following a demonstration of the shared service principal exploit at the Black Hat ...

Update, May 11, 2025: This story, originally published May 9, has been updated with more details on the move towards greater cloud Common Vulnerabilities and Exposures (CVE) transparency by both ...

CISA has mandated immediate mitigation for federal agencies, while analysts urge enterprises to accelerate cloud migration and implement live threat detection. Attackers are exploiting a previously ...