Angry Hacker Drops Microsoft Zero-Day Exploit, 1 Billion Users Warned

A security researcher frustrated with Microsoft has released the BlueHammer Windows zero-day exploit, telling the company, “I'm not explaining how this works.” ...

Microsoft Edge loads your passwords into memory in plaintext, but Microsoft says not to worry

A security researcher has discovered that Microsoft Edge will load all your stored passwords into memory in plaintext at ...

Microsoft Says Edge Password Security Vulnerability Is ‘By Design’—Is It Time To Switch To Chrome?

Microsoft Edge loads all your saved passwords, decrypted and in plaintext, into memory at startup. Google Chrome doesn’t—is ...
Dark Reading

Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk

Proof-of-concept exploit (PoC) shows how someone with admin privileges can exploit the bug to steal passwords, and use them ...

Microsoft Defender Flaws Exploited on Windows, Two Left Unpatched

Although the team with Microsoft moved swiftly to patch the BlueHammer vulnerability, other exploits still threaten Microsoft Defender and Windows users.
SiliconANGLE

Aim Security details first known AI zero-click exploit targeting Microsoft 365 Copilot

A new report out today from Aim Security Ltd. reveals the first known zero-click artificial intelligence vulnerability that could have allowed attackers to exfiltrate sensitive internal data without ...
Dark Reading

'BlueHammer' Windows Zero-Day Exploit Signals Microsoft Bug Disclosure Issues

The leak online of exploit code for an apparent Windows zero-day flaw dubbed "BlueHammer" could be the sign of a larger issue that security researchers face when collaborating with Microsoft on ...

Hackers are abusing unpatched Windows security flaws to hack into organizations

A security researcher published details of three security vulnerabilities in Windows Defender, and the code used to exploit them. Now, hackers are taking advantage of the vulnerabilities in real life ...
Hosted on MSN

Microsoft patches GitHub flaw within hours, no exploits found

Microsoft patched a high-severity GitHub vulnerability, CVE-2026-3854, within about two hours of disclosure, preventing any ...
Bleeping Computer

Windows Server emergency patches fix WSUS bug with PoC exploit

Microsoft has released out-of-band (OOB) security updates to patch a critical-severity Windows Server Update Service (WSUS) vulnerability with publicly available proof-of-concept exploit code. WSUS is ...
GeekWire

Microsoft grapples with another security breach: The latest on the SharePoint attacks

Microsoft is once again in the cybersecurity spotlight, acknowledging Tuesday morning that hackers linked to China are among those exploiting vulnerabilities in on-premises SharePoint software, the ...
Bleeping Computer

Microsoft Teams to protect against malicious URLs, dangerous file types

Microsoft recently revealed that it's enhancing protection against dangerous file types and malicious URLs in Teams chats and channels. "Microsoft Teams now blocks messages containing weaponizable ...