Rabia Noureen

Cybersecurity company Socket has discovered ten malicious npm packages that masquerade as widely used libraries to stealthily harvest developer credentials. This sophisticated attack uses fake CAPTCHA, obfuscated code, and multi-stage payloads to harvest sensitive data from unsuspecting victims. An npm package is a reusable piece of code that developers can share and integrate into their…

If you’re struggling to sign in to Microsoft’s services this morning, you’re not alone. Indeed, a widespread outage has taken down Azure, Microsoft 365, and several other cloud platforms as the company races to restore access. According to Microsoft, the major outage affected Microsoft’s cloud services starting around 12:00 P.M. ET. This issue appears to…

Microsoft has launched version 3.x of its Defender for Identity sensor, bringing endpoint and identity protection together under one unified solution. This upgraded sensor simplifies deployment, streamlines management, and enhances security visibility across enterprise environments. The Microsoft Defender for Identity sensor is a lightweight agent installed on domain controllers that monitors and analyzes network traffic…

Dell Technologies has issued an urgent warning about three critical vulnerabilities in its Storage Manager software. These flaws could allow remote hackers to gain unauthorized access to sensitive systems and data. Dell Storage Manager is a centralized software platform used to manage Dell storage systems, including configuration, monitoring, and performance optimization. It provides administrators with…

Microsoft is making life easier for IT admins with a new policy-based method that finally simplifies removing unwanted pre-installed Microsoft Store apps from Windows 11 devices. This new policy is currently available for customers running Windows 11 Enterprise and Education version 25H2. Microsoft says IT administrators have long faced challenges removing pre-installed Microsoft Store apps…

Cybersecurity researchers have discovered that the Qilin ransomware group has created a Linux-based variant capable of infecting Windows systems. This cross-platform capability enables attackers to evade traditional Windows-focused security tools and poses a new level of threat to enterprise networks. According to new research from Trend Micro, the Agenda ransomware group (also known as Qilin)…

Global IT spending is projected to reach $6.08 trillion in 2026. This is the first time IT spending will exceed the $6 trillion mark as businesses ramp up investments in AI-powered infrastructure and software. According to new research from Gartner, global IT spending is expected to rise by 9.8% in 2026 compared to 2025. This…

Microsoft has issued a warning that cybercriminals are increasingly zeroing in on Azure Blob Storage, turning misconfigurations and automation flaws into gateways for intrusion. Hackers are exploiting these weak points to infiltrate cloud environments and steal sensitive data on a massive scale. Azure Blob Storage is a cloud-based service provided by Microsoft Azure that allows…

Microsoft has issued an out-of-band update for Windows Server to fix a critical remote code execution (RCE) vulnerability in Windows Server Update Services (WSUS). The flaw, tracked as CVE-2025-59287, poses a significant threat to organizations relying on WSUS for managing updates across enterprise networks. Critical WSUS vulnerability puts Windows Servers at risk According to Microsoft,…

Microsoft is getting ready to expand the passkey (FIDO2) authentication methods policy in Microsoft Entra ID next month. The upcoming public preview will introduce support for passkey profiles that enable granular, group-based authentication controls across organizations. Currently, Microsoft Entra ID allows administrators to manage passkey authentication settings at the tenant-wide level. This means that the…

Microsoft has announced that Office Online Server will reach end of support deadline on December 31, 2026. After this date, the company will no longer provide security updates, bug fixes, or technical support for the platform. According to Microsoft, this change will help to focus on cloud-first solutions like Microsoft 365. This means that systems…

Microsoft has released a new Windows 11 update to resolve a bug that disabled mouse and keyboard inputs within the Windows Recovery Environment (WinRE). The issue stemmed from the recent October 11 security update (KB5066835), which left users unable to navigate recovery tools. Windows Recovery Environment (WinRE) is a built-in toolset in Windows that helps…