Microsoft

Microsoft fixes actively exploited Windows Hyper-V zero-day flaws

January 14, 2025

Microsoft has marked January 2025 Patch Tuesday with a hefty load of patches: 157 CVE-numbered security issues have been fixed in various products, three of which (in Hyper-V) …

January 2025 Patch Tuesday forecast: Changes coming in cybersecurity guidance

January 10, 2025

January 2025 Patch Tuesday is now live: Microsoft fixes actively exploited Windows Hyper-V zero-day flaws Welcome to 2025 and a new year of patch excitement! In my December …

Ivanti Connect Secure zero-day exploited by attackers (CVE-2025-0282)

January 8, 2025

NEW STORY: Thursday, January 9, 07:30 ET Ivanti Connect Secure zero-day exploited since mid-December (CVE-2025-0282) Ivanti has fixed two vulnerabilities affecting Ivanti …

Balancing proprietary and open-source tools in cyber threat research

January 6, 2025

In this Help Net Security interview, Thomas Roccia, Senior Security Researcher at Microsoft, discusses how threat research drives faster, better decision-making in …

Microsoft enforces defenses preventing NTLM relay attacks

December 11, 2024

Since making Kerberos the default Windows authentication protocol in 2000, Microsoft has been working on eventually retiring NTLM, its less secure and obsolete counterpart. …

Microsoft fixes exploited zero-day (CVE-2024-49138)

December 10, 2024

On December 2024 Patch Tuesday, Microsoft resolved 71 vulnerabilities in a variety of its products, including a zero-day (CVE-2024-49138) that’s been exploited by …

Microsoft: “Hack” this LLM-powered service and get paid

December 9, 2024

Microsoft, in collaboration with the Institute of Science and Technology Australia and ETH Zurich, has announced the LLMail-Inject Challenge, a competition to test and improve …

December 2024 Patch Tuesday forecast: The secure future initiative impact

December 6, 2024

December 2024 Patch Tuesday is now live: Microsoft fixes exploited zero-day (CVE-2024-49138) It seems like 2024 just started, but the final Patch Tuesday of the year is almost …

Microsoft asks Windows Insiders to try out the controversial Recall feature

November 25, 2024

Participants of the Windows Insider Program that have a Qualcomm Snapdragon-powered Copilot+ PC can now try out Recall, the infamous snapshot-taking, AI-powered feature that …

Yubico Enrollment Suite boosts security for Microsoft users

November 20, 2024

Yubico announced Yubico Enrollment Suite for Microsoft users, including Yubico FIDO Pre-reg and the new YubiEnroll. These solutions integrate with Microsoft’s Entra ID, …

Microsoft announces Zero Day Quest hacking event with big rewards

November 19, 2024

Microsoft is enhancing its bug bounty initiatives with the launch of the Zero Day Quest hacking event. With $4 million in potential rewards, it focuses on driving research in …

Microsoft announces new and improved Windows 11 security features