Microsoft has announced patches for 622 vulnerabilities, including exploited zero-days in Active Directory and SharePoint ...

Microsoft has announced that passkeys will become the default authentication method for the Entra ID enterprise identity ...

Microsoft's 2026 lifecycle schedule includes major support deadlines for Windows, Office, SQL Server, SharePoint, and Azure ...

OAuth client ID spoofing lets attackers test Entra accounts and stolen passwords without successful sign-ins, leaving ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three ...

Microsoft will make passkeys the default authentication method in Entra ID and phase out its native delivery of SMS and voice authentication, a major shift aimed at reducing organizations' dependence ...

Microsoft's latest Exchange Server security updates fix a critical flaw, but IT admins should be aware of a rollback step and ...

Microsoft's central hub for vulnerability reporting, security updates, and coordinated response across Microsoft.