Microsoft has updated its security rewards program to include larger payouts for .NET-related vulnerabilities. The .NET bug bounty now pays researchers up to $40,000 for critical flaws like remote code execution or privilege escalation. The updated program reflects Microsoft’s growing focus on community-driven security improvements. Microsoft Expands the Program’s Scope The bounty program now covers…
Elon Musk’s social media platform X has criticized the UK’s Online Safety Act, calling it a threat to free speech. In a recent statement, the company warned that the law’s wide scope could lead to excessive censorship under the guise of child protection. Age Checks Now Mandatory in the UK As of last Friday, social…
Brazil’s antitrust watchdog CADE has launched an investigation into Microsoft following a formal complaint from Norwegian browser company Opera. The case, announced Thursday, centers around allegations of unfair competition involving Microsoft Edge and the tech giant’s AI-powered Jumpstart initiative. Opera Claims Microsoft Shuts Out Rivals Opera filed the complaint on Tuesday, accusing Microsoft of anti-competitive…
If you’ve been using Microsoft Authenticator to store your passwords, it’s time to act. On August 1st, Microsoft will permanently delete all saved passwords and payment data from the app—ending its use as a credential vault. The app will continue to support two-factor authentication (2FA) and passkeys. But if you’ve relied on it for autofill…
The UK Ministry of Defence is tapping into esports to level up its military’s digital edge. In partnership with the British Esports Federation, the ministry has announced the International Defence Esports Games (IDEG)—a groundbreaking tournament designed to strengthen troops’ cyber skills and modern combat readiness. Scheduled for late 2026, the IDEG will first welcome service…
A new investigation has uncovered that companies tied to China’s state-backed hacking group Hafnium have filed over a dozen patents for spyware and surveillance tools. These Hafnium spyware patents expose a deeper, more structured cyber espionage network than previously understood. The findings come from cybersecurity firm SentinelOne, following a 2025 indictment by the U.S. Department…
The first half of 2025 has seen a dramatic password theft surge, with cybercriminals increasingly turning to infostealers and ransomware to break into systems, steal identities, and exfiltrate sensitive data. According to Flashpoint’s Global Threat Report, stolen credentials have become the primary tool for launching large-scale attacks. Key findings from the report show: These numbers…
A wave of cyberattacks targeting a Microsoft SharePoint vulnerability has now reached more than 90 state and local governments across the United States. According to the Center for Internet Security (CIS), a nonprofit that supports local authorities in responding to cyber threats, attackers have launched widespread scanning and intrusion attempts exploiting this critical flaw. CIS…
A newly discovered Lenovo BIOS vulnerability could allow attackers to gain full control of affected systems, bypass operating systems, and even install persistent malware. Lenovo has released urgent advisories and firmware updates, but some patches are still pending. The flaw affects select Lenovo IdeaCentre and Yoga AIO (All-In-One) computers using BIOS developed by Insyde Software.…
Russian airline Aeroflot cancelled dozens of flights on Tuesday following a massive cyberattack, but claimed its flight schedule had largely stabilized. The attack, claimed by two pro-Ukraine hacker groups, reportedly disrupted 7,000 servers and accessed sensitive employee and passenger data. The hackers, Belarusian Cyber Partisans and the group Silent Crow, said they spent a year…