2+ day, 13+ hour ago   (329+ words) As cyber threats continue to evolve, Microsoft is strengthening Windows activation security by extending protection beyond software and into the hardware layer. The new KMS Hardware-Secured feature uses TPM-based attestation to ensure that activation servers are running on trusted, uncompromised…...

2+ day, 16+ hour ago   (496+ words) Microsoft has introduced a new capability in Defender for Office 365 to protect against prompt injection attacks, which target AI-powered email workflows, such as Microsoft 365 Copilot. This update reflects the evolving threat landscape, where attackers increasingly attempt to manipulate AI systems…...

2+ day, 19+ hour ago   (452+ words) As organizations increasingly adopt AI assistants like Microsoft 365 Copilot to summarize, triage, and respond to emails, attackers are shifting their tactics from traditional phishing methods to manipulating AI systems directly. This new type of attack, known as prompt injection, embeds…...

2+ day, 17+ hour ago   (286+ words) Published on July 23, 2026 Microsoft has announced KMS Hardware-Secured, a major upgrade that links Windows activation to trusted hardware instead of software alone. The change targets cloned and spoofed Key Management Service (KMS) servers, which have become a growing security and…...

4+ day, 18+ hour ago   (302+ words) A newly disclosed detection gap in Microsoft Defender XDR could be causing security teams to silently miss command-and-control (C2) traffic and other malicious external communications, according to researcher Alex Teixeira. The flaw centers on how Defender’s DeviceNetworkEvents table classifies IPv4-mapped IPv6 addresses,…...

4+ day, 13+ hour ago   (719+ words) Security researcher Alex Teixeira disclosed on July 20, 2026, that Microsoft Defender XDR and Microsoft Sentinel can log outbound connections to public internet destinations under a value that many detection queries never check. The issue turned up, according to Teixeira, during a…...

4+ day, 18+ hour ago   (293+ words) Security teams relying on Microsoft Defender XDR’s DeviceNetworkEvents table for hunting and detection may be missing critical external network connections due to a lesser-known IP address classification quirk. According to Detect FYI, the blind spot surfaced during a Purple Team…...

5+ day, 17+ hour ago   (455+ words) Windows 11 may reboot twice after updates, particularly when a large cumulative update installs alongside separate.NET Framework or Secure Boot components. The behavior appeared during the July 2026 Patch Tuesday rollout for KB5101650, according to Windows Latest. An additional restart does not…...

5+ day, 18+ hour ago   (26+ words) Large monthly Windows 11 Patch Tuesday updates can require two reboots instead of one to fully install. The first reboot applies the core operating system chang...

1+ week, 21+ hour ago   (1205+ words) Bitdefender Labs has documented three new attack techniques that abuse a legitimate Windows file-system virtualisation feature to evade endpoint detection and response (EDR) tools, bypass built-in Windows security controls and manipulate forensic artifacts, all without modifying a single file on…...