Microsoft assigned CVE-2026-21520 to a Copilot Studio prompt injection vulnerability and patched it in January — but in ...

A new tool claims Microsoft's redesigned Recall feature can still expose sensitive user data, reigniting privacy and security ...

Microsoft says its Recall app — which captures and stores screenshots every few seconds — is safe. One year after its launch ...

Microsoft’s April 2026 Patch Tuesday fixes 165 vulnerabilities, including two zero-days, in one of the company’s largest ...

When Microsoft tried to launch Recall, an AI-powered Windows feature that screenshots most of what you do on your PC, it was ...

This month's Patch Tuesday includes an actively exploited Office zero-day vulnerability and several critical RCE bugs in ...

Microsoft's Recall feature faces renewed security concerns as a researcher demonstrates how a tool can bypass its protections ...

Microsoft fixes 167 bugs in April Patch Tuesday, including critical and zero-day vulnerabilities affecting Windows and Office ...

Microsoft fixes 169 vulnerabilities including exploited SharePoint CVE-2026-32201, prompting CISA remediation by April 28, ...

Elevation-of-privilege bugs accounted for more than half of the 165 vulnerabilities patched, with two zero-days in that mix.

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

It's not clear how many people were compromised by this hacking campaign, but a security researcher said the hackers were ...