Microsoft Patch Tuesday September 2026 set a record with 966 vulnerabilities patched, but security analysts say an ...

Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

CISA added Microsoft SQL Server RCE flaw CVE-2019-1068 to its KEV catalog after confirming active exploitation.

Attackers chain two PaperCut NG and MF flaws for unauthenticated remote code execution, with limited exploitation seen in two ...

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Anthropic locks out Claude users after infostealers ...

Rhysida ransomware breached Berlin’s government network and claimed 5.79 TB of stolen data, including water-supply ...

Adobe’s acquisition of Rilo adds AI workflow orchestration to its growing effort to automate the work surrounding enterprise ...

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based ...

On 2, 2026, CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, and one of them sits inside an AI proxy a lot ...

PostgreSQL vulnerability CVE-2026-6471 allows low-privileged attackers to execute code, gain PostgreSQL superuser access and ...

Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week. WMIC is a ...