Rabia Noureen

Microsoft has announced a new update to MDASH that enhances vulnerability detection accuracy and introduces native integration with Microsoft Defender to streamline security operations. The company is also expanding the public preview to a broader group of commercial customers. The Microsoft Security multi-model agentic scanning harness (MDASH) is an AI‑powered vulnerability detection system designed to…

Microsoft’s May Intune update introduces several enhancements designed to make endpoint management more streamlined, secure, and efficient. The release delivers improved device onboarding, stronger Android and macOS management capabilities, clearer reporting, and new automation features that help IT teams reduce administrative overhead. Microsoft has announced the general availability of the Personal Work Profile Android Management…

Microsoft has announced the Surface Laptop Ultra, which is powered by Nvidia’s new Arm-based RTX Spark chip. The premium AI-focused laptop is set to begin shipping in Fall 2026 alongside a new wave of devices featuring the new RTX Spark chip. The Surface Laptop Ultra is built around a high‑performance hardware platform designed for demanding…

Microsoft is strengthening password reset security in Microsoft Entra ID with a major update to its Self-Service Password Reset (SSPR) process. Commercial customers are now being notified that only explicitly registered authentication methods will be accepted for identity verification. Microsoft Entra ID Self-Service Password Reset (SSPR) is a feature that allows users to reset or…

Microsoft has acknowledged a new issue in Windows Server 2016 where domain controller discovery may fail after installing the May 2026 KB5087537 security update. The problem specifically affects Windows Server machines with certain hostname conditions, which disrupt critical network and administrative functions. Domain controller lookup is a process in Active Directory that allows a computer…

Keeping servers secure has long meant disruptive restarts, but Microsoft is changing that approach with a major update. With Windows Server 2025, hotpatching enabled by Azure Arc is now available at no additional cost, allowing organizations to apply critical security fixes in real time without interrupting operations. Hotpatching is a feature that allows security updates…

Microsoft has released security updates to fix a high-severity remote code execution vulnerability in Microsoft SharePoint Server that could allow attackers to compromise vulnerable servers. This flaw could be exploited by attackers with only minimal access privileges, potentially enabling malicious code execution without requiring administrator rights. CVE‑2026‑45659 is a remote code execution (RCE) vulnerability that…

Microsoft has enhanced Windows Autopatch with a new Secure Boot status report that improves visibility into device readiness for certificate updates. The update enables IT teams to move beyond policy-based checks and make more informed, data-driven rollout decisions. Secure Boot is a security feature that ensures a device starts only with trusted, digitally signed software,…

The US Federal Bureau of Investigation has issued a warning about a new Phishing-as-a-Service platform called Kali365, which is designed to compromise Microsoft 365 accounts. This cybercrime tool enables attackers to bypass traditional security protections and gain persistent access to accounts without raising suspicion. Phishing‑as‑a‑Service (PhaaS) is an emerging cybercrime model in which ready‑made phishing…

A routine software update has escalated into a serious disruption for some HP laptop owners. Following recent BIOS firmware updates, customers are reporting system slowdowns, crashes, and blue screen errors across several high‑end models. Specifically, HP is investigating widespread complaints that certain BIOS updates are causing critical failures in premium business laptops. In some cases,…

A China-linked cyber-espionage group called Webworm is intensifying attacks against European government organizations by abusing trusted platforms and unconventional command-and-control techniques to hide in plain sight. This group blends malicious operations with legitimate cloud services and stealthy proxy networks to infiltrate, evade detection, and maintain long-term access to high-value systems. According to security vendor ESET,…

Microsoft has detailed the recent security enhancements designed to give organizations stronger oversight, management, and defense across increasingly complex digital environments. These updates help ensure that data, applications, and operations remain secure and well‑governed across the entire ecosystem. First off, Microsoft has launched a new Claude Compliance API for Microsoft Purview. This new integration allows…