News
- Blog
- News
LATEST
-
OAuth Permissions in Microsoft Entra ID Enable Stealthy Corporate Email AccessCybercriminals are increasingly bypassing enterprise defenses by weaponizing routine OAuth consent prompts within Microsoft Entra ID. A new study from… -
Windows 365 Cloud PC Device Lineup Expands With New Mini PCs From ASUS, DellMicrosoft has announced two new compact Cloud PC devices built specifically for Windows 365 customers, expanding its purpose-built hardware lineup… -
Microsoft Updates Windows Server 2025 Security Baseline with New Policy Changes for IT AdminsMicrosoft has released the February 2026 security baseline update (v2602) for Windows Server 2025, introducing updated configuration standards for enterprise…
-
High‑Risk Vulnerabilities Surge, Deepening Security Debt for IT TeamsAs software teams accelerate delivery in the AI era, security vulnerabilities are expanding at an even greater pace. The 2026…
-
Expired Secure Boot Certificates Will Put Windows Server Environments at Risk — What Admins Need to Do NowMicrosoft is urging Windows Server administrators to prepare for upcoming Secure Boot certificate expirations. The expiration of the original Secure…
-
Microsoft 365 Local Reaches GA With Azure Local — New Options for Offline‑Secure WorkloadsMicrosoft has broadened its Sovereign Cloud portfolio to enable governments and highly regulated industries to operate securely, even in completely…
-
SolarWinds Patches Critical Serv‑U Flaws That Could Allow Full Server TakeoverSolarWinds’ Serv‑U 15.5.4 update fixes multiple high‑risk vulnerabilities that could have allowed attackers to gain full system control. The patches…
-
Microsoft Defender for Endpoint Updates Boost Visibility and ControlMicrosoft has rolled out a new set of features and enhancements for Microsoft Defender for Endpoint this month. These updates…
-
Microsoft Warns Enterprises as Legacy Windows Versions Near End of SupportMicrosoft’s newly announced end-of-support deadlines for several legacy Windows platforms have triggered heightened urgency across enterprise IT environments. As security…
-
Hackers Exploit OAuth Device Code Flow to Breach Microsoft Entra AccountsThreat actors are actively abusing Microsoft’s OAuth 2.0 Device Authorization flow to compromise Microsoft Entra (formerly Azure AD) accounts without…
-
First Ring Daily: The Top ProgrammersIn this episode of First Ring Daily, Brad Sams and Paul Thurrott discuss recent comments from software engineers Mark Russinovich…
-
Chinese APT Exploits Dell Zero-Day Flaw to Gain Persistent VMware AccessChinese state-sponsored hackers have quietly leveraged a hard-coded credential flaw in Dell RecoverPoint for Virtual Machines for nearly two years,…
