Researcher Drops PoC for 1-Click GitHub Token Theft via VSCode Bug — Skips MSRC Entirely
Security researcher Ammar Askar has publicly released a fully working proof-of-concept (PoC) exploit that can steal…
Category
Microsoft
Microsoft’s durabletask Hit by TeamPCP — Your Cloud Keys Were the Target
TeamPCP has quietly poisoned yet another trusted developer package — and this time the target was…
Microsoft Busts “Fox Tempest” — A Dark Web Service That Sold Fake Code Signatures to Ransomware Gangs
Microsoft has dismantled a sophisticated criminal operation that essentially ran a paid signing service for malware,…
Storm-2949 Hackers Turned One Stolen Password Reset Into a Full Azure Cloud Takeover
A single helpdesk phone call was all it took. Microsoft’s Threat Intelligence team has published a…
Microsoft Exchange Zero-Day Exploited in the Wild — and Pwn2Own Researchers Just Made It Worse
Microsoft Exchange Server is having a very bad week. While threat actors are already exploiting a…
Microsoft’s AI Just Found 16 Windows Vulnerabilities Humans Missed — And It’s Only Getting Started
For decades, finding dangerous bugs buried deep inside Windows has been a job for elite human…
Microsoft’s April Patch Breaks Its Own Security Feature — Domain Controllers Are Stuck in Reboot Loops
There is a bitter irony in a security patch disabling the very infrastructure that enterprise security…
Your Router Is Spying on You — And Russia’s APT28 Is Behind It
Your home router may already be working for Russian military intelligence — and you’d have no…
AI Found Three Critical Microsoft RCEs on Its Own — And Got the CVEs to Prove It
For the first time in the history of vulnerability research, an autonomous AI system has been…