The targeted espionage tool hides commands and stolen files inside calendar events while using legitimate Microsoft cloud traffic to evade detection.

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026. This comes with the following caveat: extended support is only ...

A PowerShell terminal UI for managing Microsoft Intune resources via Microsoft Graph API. Uses a custom ANSI TUI engine with Catppuccin Mocha colors, Unicode box-drawing, gradient decorations, and ...

Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week. The zero-day flaw, now tracked as CVE-2026-45585, carries a ...

Microsoft has announced that it’s about to roll out a small but important change to how Windows devices receive security updates. Starting with the May 2026 Windows security update, hotpatch updates ...

Microsoft will turn on hotpatch security updates by default for all eligible Windows devices managed through Microsoft Intune and the Microsoft Graph API, beginning with the May 2026 Windows security ...

Bitdefender rolled out an extensive list of updates and new functionality in Bitdefender GravityZone, a unified cybersecurity platform that provides prevention, protection, detection, and response ...

Microsoft is moving towards bringing together a Windows-powered PC and an Android phone or an iOS device. Here, Microsoft Graph plays an important role as the crux of this vision. Microsoft Graph ...

Written by Itzik Alvas, Entro Security. One in every five exposed enterprise secrets originated from SharePoint. It wasn’t the result of a zero-day or a sophisticated exploit. Instead, the exposure ...