Rabia Noureen

An attacker who has administrative-level access can retrieve Microsoft Edge users’ saved passwords from memory, even when those credentials are not actively being used. This is possible because the browser temporarily keeps them in an unencrypted form in its process memory as part of how it is designed. According to a new report from Securonix,…

RDP vulnerabilities have become a critical but often overlooked risk for organizations worldwide, which leaves many systems unknowingly exposed. Cyber attackers are increasingly exploiting these gaps by using unsecured servers as easy entry points into enterprise networks. According to a new report from Forescout Vedere Labs, millions of RDP and VNC servers are publicly accessible…

Microsoft has introduced a public preview of user-initiated provisioning for Windows 365 Reserve. The feature enables selected users to spin up their own Reserve Cloud PC on demand, reducing reliance on IT administrators and minimizing downtime. Windows 365 Reserve is a cloud‑based service that provides employees with a temporary, fully configured virtual Windows PC when…

Microsoft is rolling out a series of enhancements to Microsoft Intune, targeting deeper visibility and tighter control across modern endpoints. This month’s updates span improved Windows app inventory, a more secure Linux SSO experience, and expanded enrollment and management capabilities for Apple devices. Microsoft has added new enhanced app inventory capabilities in the “All Apps”…

Microsoft has announced the general availability of Agent 365, which first entered preview in November 2025. Alongside the release, the company introduced new capabilities designed to help organizations discover, monitor, and manage both sanctioned agents and shadow AI across their environments. Microsoft Agent 365 is designed to give organizations a centralized way to monitor, manage,…

Microsoft is set to make unified role-based access control (RBAC) the default permission model for all new Microsoft Defender for Office 365 environments. The company is also rolling out more granular email access controls to give security teams tighter, more precise control over sensitive data. Starting on May 30, Unified RBAC will be enabled by…

Microsoft and the CISA have issued an urgent alert to federal agencies over a newly discovered Windows zero-day vulnerability. The flaw could enable attackers to silently extract sensitive data from affected systems. According to a new report from cybersecurity firm Akamai, CVE‑2026‑32202 is a Windows vulnerability that emerged due to an incomplete fix for an…

Microsoft is strengthening security in Exchange Online by retiring support for outdated email encryption methods. Beginning in July 2026, organizations still using legacy TLS versions for POP3 and IMAP4 connections may experience service disruptions unless they transition to modern encryption standards. The change is part of Microsoft’s broader effort to eliminate aging security protocols that…

Most enterprises are already testing or deploying AI PCs as they shift AI workloads beyond the cloud to enable faster, more secure processing directly on devices. As autonomous, agent-driven systems gain momentum, these next-generation PCs are emerging as a critical investment for organizations preparing for the future of work. According to a new research from…

Windows updates are about to become far less interruptive and far more user‑friendly. Microsoft has announced a redesigned Windows Update experience that puts control back in users’ hands while quietly working behind the scenes to keep devices secure. According to Microsoft, users can now choose to skip updates during the initial device setup, which allows…

Cybersecurity researchers have disclosed a critical Windows flaw that could enable attackers to escalate privileges and gain unauthorized access to sensitive systems. The issue could allow low-privileged users to elevate their permissions and potentially take full control of affected machines. According to a new report from Kaspersky, this technique, dubbed PhantomRPC, exploits a fundamental design…

Microsoft has announced the general availability of Tenant Configuration Management (TCM) APIs for commercial customers. The new APIs give organizations a programmatic way to define, monitor, and maintain secure Microsoft 365 configurations at scale. In traditional tenant configuration management, access and control are tied to individual administrator permissions rather than a centralized view of the…