Curated security research, vulnerabilities, advisories and tools for practitioners.

#microsoft

Security coverage tagged microsoft.

1.

ShieldCrash: Windows Defender 0-Day PoC Bypassing ShieldBreak (CVE-2026-69414) Patch

vulnerability | High | 2026-09-07 20:36 | CVE-2026-69414 | github.com | original ↗ | #cloud | #zero-day | #arbitrary-file-read

2.

September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

blog | 2026-09-08 00:00 | crowdstrike.com | original ↗ | #zero-day | #vulnerability-management | #microsoft

3.

How to Spot and Stop Rogue Device Joins

blog | 2026-08-18 16:24 | wiz.io | original ↗ | #ai-security | #microsoft | #identity-security

4.

CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login

vulnerability | 2026-08-11 05:13 | CVE-2026-55040 | blog.viettelcybersecurity.com | original ↗ | #authentication-bypass | #microsoft | #sharepoint

5.

August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs

vulnerability | 2026-08-11 00:00 | crowdstrike.com | original ↗ | #zero-day | #vulnerability-management | #microsoft

6.

A Shell Is Worth a Thousand Images: Bing Images RCEs

research | 2026-07-23 12:00 | xbow.com | original ↗ | #ai-security | #rce | #featured

7.

Where Things Might Go Wrong with Agent Identities in Entra ID—and How to Prevent Disaster

blog | 2026-07-13 00:47 | semperis.com | original ↗ | #ai-security | #agentic-ai | #access-control

8.

The Agent Registry and How Agent Identities Operate in Entra ID

blog | 2026-07-10 18:17 | semperis.com | original ↗ | #ai-security | #agentic-ai | #access-control

9.

Agent ID: Understanding Microsoft’s Agent Identity Platform

blog | 2026-06-30 22:45 | semperis.com | original ↗ | #ai-security | #microsoft | #identity-security

10.

Full Fathom Five: The context of Anthropic’s Mythos-class public release

blog | 2026-06-13 00:00 | aikido.dev | original ↗ | #ai-security | #vulnerability-management | #ai-safety

11.

Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW

research | 2026-04-02 04:00 | xbow.com | original ↗ | #ai-security | #cloud | #rce

12.

Making Continuous Offensive Security Operational with Microsoft

blog | 2026-03-23 12:00 | xbow.com | original ↗ | #ai-security | #pentesting | #continuous-testing

13.

JFrog Earns Microsoft Solutions Partner with Certified Software Designation for Azure

blog | 2026-03-05 17:56 | jfrog.com | original ↗ | #cloud | #supply-chain | #microsoft

14.

Cyber budgets still growing (but not fast enough), ‘AI and automation are operational imperatives’, the real-world impact of boosting Bug Bounty rewards – OffSec roundup for CISOs

blog | 2025-11-10 13:50 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #microsoft

15.

What is CVE-2025-53770? A Critical Microsoft SharePoint Vulnerability and How to Respond

vulnerability | Critical | Actively exploited | 2025-07-23 19:49 | CVE-2025-53770 | hackerone.com | original ↗ | #active-exploitation | #rce | #microsoft

16.

SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know

vulnerability | 2025-07-21 17:42 | wiz.io | original ↗ | #rce | #microsoft | #sharepoint

17.

Welcome Umesh Shankar to the Bugcrowd Advisory Board

blog | 2025-07-08 11:45 | bugcrowd.com | original ↗ | #ai-security | #cloud | #microsoft

18.

The rise of device code phishing

blog | 2025-03-11 12:00 | bugcrowd.com | original ↗ | #microsoft | #phishing | #red-team

19.

Kali Linux On The New Modern WSL

blog | 2025-01-28 00:00 | kali.org | original ↗ | #microsoft | #windows | #virtualization

20.

Top Pitfalls of Depending on Manual AD Forest Recovery After a Cyberattack

blog | 2025-01-15 18:06 | semperis.com | original ↗ | #active-directory | #microsoft | #disaster-recovery

21.

Exposing Massive Phishing Scams Abusing Cloudflare Services

blog | 2024-11-07 00:00 | hunt.io | original ↗ | #credential-theft | #microsoft | #phishing

22.

Wiz joins the Microsoft Intelligent Security Association

blog | 2024-09-16 13:29 | wiz.io | original ↗ | #cloud-security | #microsoft | #partnership

23.

It’s Magic! Wiz named Microsoft Commercial Marketplace Partner of the Year

blog | 2024-06-27 13:14 | wiz.io | original ↗ | #cloud | #cloud-security | #microsoft

24.

Midnight Blizzard attack on Microsoft corporate environment: a detailed analysis, detections and recommendations

blog | 2024-02-08 18:00 | wiz.io | original ↗ | #threat-detection | #microsoft | #oauth

25.

Identity Attack Watch: AD Security News, January 2024

incident | 2024-01-31 17:18 | semperis.com | original ↗ | #active-directory | #microsoft | #news-roundup

26.

AI In Windows: Investigating Windows Copilot

blog | 2023-12-27 14:00 | blog.trailofbits.com | original ↗ | #ai-security | #microsoft | #windows

27.

38TB of data accidentally exposed by Microsoft AI researchers

blog | 2023-09-18 13:01 | wiz.io | original ↗ | #ai-security | #cloud-security | #data-exposure

28.

Fortify your cloud security with Wiz as it integrates with Microsoft Sentinel

blog | 2023-09-14 14:57 | wiz.io | original ↗ | #cloud | #cloud-security | #siem

29.

Storm-0558 Update: Takeaways from Microsoft's recent report

blog | 2023-09-07 19:42 | wiz.io | original ↗ | #cloud | #cloud-security | #incident-response

30.

Windows Task Scheduler Application, Version 19044.1706 Advisory

vulnerability | 2023-04-04 00:00 | CVE-2023-21541 | bishopfox.com | original ↗ | #microsoft | #privilege-escalation | #windows