Rabia Noureen

The National Cyber Security Centre (NCSC) has warned about AI prompt injection attacks, exposing organizations to a new class of stealthy manipulation. Unlike conventional vulnerabilities, these attacks exploit the way LLMs interpret text, which forces security teams to rethink their defenses to protect critical systems. How does prompt injection differ from traditional vulnerabilities? A prompt…

Microsoft has released the December 2025 Patch Tuesday updates for Windows 11 versions 25H2 and 24H2. This month, the company rolled out 56 new patches to address vulnerabilities in Windows, Office, Exchange Server, Azure, PowerShell, Windows Defender, and other components. On the quality and experience updates front, Microsoft has introduced a couple of improvements for…

Microsoft has rolled out a new update that enables Storage Spaces Direct (S2D) and SAN storage to operate together within a single-rack failover cluster. This enhancement is available for Windows Server 2022 and Windows Server 2025. Storage Spaces Direct (S2D) is a technology that enables hyperconverged infrastructure by pooling locally attached drives across cluster nodes…

A new survey reveals a hidden security crisis brewing inside legacy web forms, with nearly nine in ten organizations reporting form-related breaches in recent years. As businesses struggle with rising compliance demands and sophisticated cyberattacks, the findings highlight an urgent need to modernize data collection practices before vulnerabilities get out of control. The 2025 Data…

Microsoft has introduced a new Common Vulnerabilities and Exposures (CVE) reporting feature within Windows Autopatch. This new capability provides security teams a unified view of Windows vulnerabilities that recent quality updates have addressed, with device-specific vulnerability tracking. In Windows Autopatch, the new CVEs report allows security teams to quickly determine which vulnerabilities have been resolved…

Microsoft will raise prices for Microsoft 365 and Office 365 commercial subscriptions starting July 2026, marking one of its biggest updates in years. The increase comes alongside major upgrades, including new AI, security, and device management capabilities. Microsoft is changing its commercial subscription prices across different plans. For small and mid-sized businesses, Business Basic will…

Microsoft is enhancing endpoint management by embedding advanced Intune capabilities directly into Microsoft 365 E3 and E5 subscriptions. These new features combine AI-driven insights, Zero Trust security, and streamlined device management to help organizations scale management and strengthen security with far less complexity. The Microsoft Intune Suite was first introduced in March 2023. It’s a premium…

Cybercriminals have been exploiting a critical flaw in Windows LNK (.lnk shortcut) files to deliver malware in targeted attacks worldwide. After months of active abuse, Microsoft has finally issued a fix for the zero-day in its November 2025 Patch Tuesday update. CVE-2025-9491 is a Windows Shell Link (.LNK) vulnerability that allows attackers to hide malicious…

Microsoft will block Exchange Web Services (EWS) access for Exchange Online mailboxes with unsupported licenses in March 2026. This move aims to boost security, enforce proper licensing, and push organizations toward modern APIs like Microsoft Graph. Exchange Web Services (EWS) is a protocol that allows applications to interact with Exchange servers to access mailbox data…

Amazon Web Services (AWS) and Google Cloud have announced a new multicloud network service that makes it easier for organizations to move data between their platforms. This new solution is designed to reduce complex setup processes from weeks to minutes. Previously, connecting multiple cloud environments used to be a highly complex and time-consuming process for…

Microsoft has introduced built-in integrations with key security partners in Microsoft Entra. These new capabilities enable multilayered protection without requiring separate contracts or complex setup. “Until now, integrating top-tier identity security solutions meant dealing with complex setups, custom code, and drawn-out contracts delaying protection and increasing risk. What makes this launch stand out isn’t just…

Amazon Web Services (AWS) announced yesterday several new agentic AI capabilities for its Transform IT modernization service. These new custom features are designed to help IT teams accelerate enterprise-wide code and application modernization. AWS Transform is a cloud-based modernization service that uses AI-driven agents to automate the migration of legacy applications, frameworks, and infrastructure to…