Microsoft Security

Microsoft, identity, cloud and the security operations centre.

35stories this week

1today

the last seven days

Most fromBleepingComputer, Help Net Security, CSO Online UK, Dark Reading

In the news hereMicrosoft31 ConnectWise8 Google2 Nvidia2 Lumma Stealer1

Exploited
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

September 23, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Microsoft Security, Nation-State Threats, Zero-Day Vulnerabilities, Threat Intelligence

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break…
The Hacker News
Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions

September 22, 2026

AI Attacks & Abuse, Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Microsoft Security, UK Cyber Attacks, UK Cyber Security News, AI & Emerging Technology

‘first’ publicly documented Windows implant to use LLMs for C2…
The Register
Microsoft Disrupts EvilTokens Device Code Phishing Service

September 22, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, Phishing & Scams, Threat Intelligence

Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phishing-as-a-service platform targeting Microsoft 365 accounts.
Dark Reading
12K accounts
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts

September 22, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Microsoft Security

EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Ars Technica
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

September 22, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Microsoft Security, Phishing & Scams, Threat Intelligence

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) “at every step of the attack chain.” The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud,…
The Hacker News
Exploited
NightmareEclipse’s latest zero-day leaves Microsoft Defender stuck in the past

September 22, 2026

Enterprise & Cloud Security, Microsoft Security, UK Cyber Attacks, Zero-Day Vulnerabilities, UK Cyber Security News, Threat Intelligence

BigDiskBuster leaves Microsoft’s antivirus running but unable to install updates…
The Register
Exploited
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

September 22, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Microsoft Security, Zero-Day Vulnerabilities, Threat Intelligence

A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster, has no patch, no CVE, and no Microsoft advisory. Its author, Abdelhamid Naceri, is a former Microsoft security researcher whose earlier Defender exploits were…
The Hacker News
UK
UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites

September 22, 2026

Cyber Laws, Enterprise & Cloud Security, Microsoft Security, Phishing & Scams, UK Cyber Attacks, UK Cyber Security News, Law, Policy & Compliance, Threat Intelligence

Used by crims to compromise 12K+ email inboxes across 10K+ global orgs…
The Register
Unmasking EvilTokens: Getting to the root of device code phishing

September 22, 2026

Enterprise & Cloud Security, Microsoft Security, Phishing & Scams, Threat Intelligence

EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disruption of EvilTokens infrastructure and operations.
Microsoft
Exploited
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

September 22, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, Phishing & Scams, Threat Intelligence

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-2026-65660, affects SharePoint Server 2016, 2019, and Subscription Edition. Patches have been…
The Hacker News

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Microsoft Security

Stay ahead in Cyber Security.