Tag: microsoft
-
Microsoft will begin blocking Outlook MSIX attachments by default in November 2026, introducing new restrictions for Windows installation packages. The change affects Outlook on the web and the new Outlook for Windows for Exchange Online users. The rollout should begin in early November and reach general availability by the middle of the month. Microsoft expects…
-
Microsoft confirmed the problem after users reported failures across several support platforms. The affected functions included copying and pasting, autofill and dragging formulas between cells. The issue affected Excel 2016, 2019, 2021 and 2024. It also disrupted Excel Online within Office Online Server environments. When users tried to paste content, Excel kept the original source…
-
Nearly 22,000 internet-exposed Microsoft Exchange servers remain unpatched against a high-severity vulnerability that could allow attackers to take over user mailboxes. The flaw, CVE-2026-62911, affects Exchange Server 2016, Exchange Server 2019 and Exchange Server Subscription Edition. Microsoft fixed the issue in its August 2026 Patch Tuesday updates. Flaw can let attackers access all mailboxes DEVCORE…
-
Microsoft has removed the legacy WMIC command-line tool from new Windows 11 installations, taking away a built-in utility that cybercriminals have repeatedly abused during attacks. The change affects Windows 11 versions 24H2 and 25H2, along with this week’s Windows 11 beta releases. While WMIC is disappearing, the underlying Windows Management Instrumentation platform remains available. Microsoft…
-
Microsoft has released security updates for the LegacyHive vulnerability, a Windows zero-day flaw that could allow a local attacker to gain administrator privileges. Tracked as CVE-2026-62832, the issue affects the Windows User Profile Service. Microsoft fixed it in the August 2026 Patch Tuesday updates after a public proof-of-concept exploit appeared shortly after July’s patches. LegacyHive…
-
A new Microsoft sign-in screen phishing campaign is using genuine Microsoft login pages to bypass traditional phishing checks. Instead of directing users to a fake website, attackers trick them into approving a malicious app after they sign in. Check Point researchers found that the campaign used convincing HR-themed Microsoft Teams lures. Once a victim grants…
-
Microsoft is preparing to require TPM attestation for servers that manage Windows Key Management Service activation, a move that could block many fake Windows KMS activators used for software piracy. The company says future KMS hosts will need to prove that they are running on verified and uncompromised hardware before they can activate Windows client…
-
Microsoft has released a security update to fix the RoguePlanet vulnerability, a Microsoft Defender zero-day disclosed shortly after the June 2026 Patch Tuesday. Security researcher Nightmare Eclipse publicly disclosed the flaw, tracked as CVE-2026-50656, during an ongoing dispute with Microsoft over its vulnerability disclosure and bug bounty practices. RoguePlanet Vulnerability Affected Fully Patched Systems According…
-
The FBI’s arrest of an alleged member of the Scattered Spider hacking group has triggered a wider debate over Microsoft GDID tracking and user privacy. Court documents show investigators identified 19-year-old Peter Stokes by linking activity to a persistent Windows Global Device Identifier (GDID). The case has left many Windows users questioning how much device…
-
A Microsoft Power BI data breach at the Avans University of Applied Sciences exposed sensitive personal information to unauthorized users for nearly a year before staff discovered the issue. The university has since fixed the vulnerability, notified affected individuals, and reported the incident to Dutch data protection authorities. Misconfiguration Exposed Personal Data for Nearly a…