Rabia Noureen

Microsoft has warned of a growing attack technique that relies on a “human‑operated” intrusion playbook, where threat actors pose as IT helpdesk staff over Microsoft Teams. Attackers exploit user trust and legitimate support tools to gain authorized access to corporate systems and quietly exfiltrate sensitive data. According to the report, attackers begin by contacting employees…

Microsoft has released an out-of-band update to address a restart loop issue triggered by the April 2026 Patch Tuesday update for Windows Server. The emergency patch (KB5091157) is now available across Windows Server 2016 through 2025 to restore system stability and prevent further disruptions. Last week, Microsoft acknowledged that some Windows Server 2025 systems failed…

Many organizations believe they’re ready for a ransomware attack, but real-world incidents tell a different story, with most failing to fully restore their data. The gap between perceived readiness and actual recovery is leaving businesses far more vulnerable than they realize. According to Veeam’s Data Trust and Resilience Report 2026, nearly 90% of security leaders…

Security researchers are warning that recently leaked Windows zero‑day vulnerabilities are already being exploited in real‑world attacks. With some flaws still unpatched, millions of systems could remain exposed. According to Huntress Labs security researchers, three previously undisclosed zero‑day Windows vulnerabilities were recently made public after a security researcher released proof‑of‑concept exploit code out of frustration…

Security experts are warning that Tycoon 2FA remains a serious threat, even after a major law‑enforcement operation dismantled the phishing‑as‑a‑service platform last month. While the takedown disrupted its infrastructure, the techniques behind Tycoon 2FA have quietly spread across other phishing operations. According to a new report from Barracuda, the March 2026 law‑enforcement operation disrupted Tycoon…

Microsoft has acknowledged a critical issue causing some Windows Server domain controllers to enter repeated restart loops after installing the April 2026 security update (KB5082063). The problem impacts both existing environments and newly deployed domain controllers, which complicates recovery and rollout efforts for IT administrators. This problem is caused by crashes in the Local Security…

Microsoft has introduced a new Backup and Recovery feature in public preview in the Entra admin center. This new built-in solution helps organizations restore critical Entra directory objects after accidental changes or security incidents. “Microsoft Entra Backup and Recovery takes backups of supported objects automatically, once a day, retaining up to five days of backup…

Microsoft has committed to providing security updates for all old versions of Exchange Server and Skype for Business. This new phase of the Extended Security Update (ESU) program is designed for customers who need more time to migrate to supported versions of the products. Microsoft’s Extended Security Update (ESU) program is a paid option that…

Microsoft has just released the April 2026 Patch Tuesday updates for all supported versions of Windows 11. This month, Microsoft fixed 163 new vulnerabilities in Windows, Office, Microsoft Edge, Azure, Hyper-V Server, BitLocker, and the Windows Wallet Service. On the quality and experience updates front, Microsoft released a new patch that brings several new features…

Microsoft has launched a new monitoring and reporting platform for Windows 365 in public preview, aimed at simplifying Cloud PC management. The solution unifies health, performance, and configuration insights into a single Microsoft Intune experience. Windows 365 Cloud PC monitoring data has been fragmented, hard to access, and inefficient to use, which makes it difficult…

Non-human identities, service accounts, and AI agents are exploding across modern environments, and security teams aren’t keeping up. As organizations hand real access and autonomy to non‑human identities, attackers are exploiting the gaps, often by simply using trusted credentials rather than breaking in. The SANS 2026 State of Identity Threats & Defenses survey gathered input…

Microsoft has notified its channel partners that prices for Windows 365 Cloud PCs will drop by 20 percent starting on May 1. The move is aimed primarily at making cloud-based desktops more attractive and affordable for small and medium-sized businesses. Windows 365 is a cloud‑based PC service that lets users stream a full Windows desktop…