Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

Microsoft Patch Tuesday September 2026 set a record with 966 vulnerabilities patched, but security analysts say an ...

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based ...

Threat actors are increasingly exploiting overlooked Active Directory service principal name misconfigurations, making ordinary domain accounts vulnerable to Kerberoasting.

PostgreSQL vulnerability CVE-2026-6471 allows low-privileged attackers to execute code, gain PostgreSQL superuser access and ...

The following is the transcript of the interview with Sunoco chairman Ray Washburne, Republican midterm election chair, that ...

Auth0, CrowdStrike Falcon and Salesforce Service Cloud connectors can now consolidate security data from multiple accounts or tenants into a single Sentinel workspace.

The flaw that had gone unnoticed since 2014 could let attackers with low-privileged replication access execute code, gain ...

A toolkit shaped by decades of Unix history makes technical work second nature on Linux.

PostGREShell (CVE-2026-6471) is a 12-year-old PostgreSQL flaw that lets low-privileged attackers execute code and take over ...