Microsoft has announced patches for 622 vulnerabilities, including exploited zero-days in Active Directory and SharePoint ...

Microsoft fixes a record 622 CVEs, including two exploited SharePoint and AD FS zero-days, while a Kerberos RC4 change could ...

A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, and how to detect and fix it ...

Microsoft's July security update tackles more than 600 flaws, including multiple critical vulnerabilities and exploited zero-days. The update also begins mandatory Kerberos RC4 enforcement, ...

Azure Migrate now supports production-ready SQL Server migrations to Azure virtual machines with integrated assessment and migration tools.

Microsoft has announced that passkeys will become the default authentication method for the Entra ID enterprise identity ...

Microsoft will make passkeys the default authentication method in Entra ID and phase out its native delivery of SMS and voice authentication, a major shift aimed at reducing organizations' dependence ...

Starting September 1, 2026, passkeys will become the default authentication experience in Microsoft Entra. Read more about ...

OAuth client ID spoofing lets attackers test Entra accounts and stolen passwords without successful sign-ins, leaving ...

An elite security team at Microsoft has built an AI-powered pipeline to find vulnerabilities in Windows and get them to ...

Security analysts are struggling to reckon with the sheer volume of common vulnerabilities and exposures (CVEs) addressed in Microsoft’s July Patch Tuesday update, which contains fixes for at least ...