Security


Biden Administration Issues Sweeping U.S. Cybersecurity Executive Order

In one of his final acts before leaving office, President Joe Biden on Thursday signed an executive order aimed at enhancing U.S. cybersecurity.

Microsoft's Massive First Patch of 2025 Includes 8 Zero-Day Flaw Fixes

Microsoft’s first Patch Tuesday of 2025 has arrived, and it's a big one. Microsoft addressed 159 vulnerabilities, including eight zero-day flaws, three of which have been actively exploited in the wild.

Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.

Microsoft Ends 2024 with 1 Zero-Day Flaw Fix, 71 CVEs

December's Microsoft patch has arrived, featuring the last security fixes for the year.

The Unheralded Announcements from Microsoft Ignite

While they might not have made Nadella's keynote, these upcoming enhancements to Azure and Microsoft security are worth paying attention to.

Report Sheds Light on Massive Phishing-as-a-Service Ring

Cybersecurity experts at Trustwave are warning about a surge in malicious email campaigns leveraging Rockstar 2FA, a phishing-as-a-service (PhaaS) toolkit designed to steal Microsoft 365 credentials.

Microsoft Outlines Latest Security Efforts at Ignite

In the wake of last year's CrowdStrike incident, Microsoft has worked to publicly rehabilitate its security image through new initiatives and public commitments to improve. That push continued this week at Ignite, where Microsoft announced a handful of new security tools and updates.

Microsoft Addresses 4 Zero-Day Holes in November Security Patch

Microsoft's monthly security update arrived on Tuesday, packed with 90 fixes for the company's portfolio of products and services, with four of the items addressing vulnerabilities that are either being actively exploited or publicly disclosed.

Microsoft Releases Windows Server 2025

Microsoft announced Monday that Windows Server 2025 is now generally available.

Windows Hello Gets UI Facelift for Windows 11

Microsoft has updated the look and feel of Windows Hello for Windows 11 users, which is currently in preview for Windows 11 Insider Preview Build users.

Cloud, Security Dominate List of Highest-Paying Tech Certs

New research reaffirms the importance of cloud expertise in higher-paying IT positions.

Microsoft Includes a VPN with Some Microsoft 365 Subscriptions

It's hidden, but it's there.

Microsoft Among Founding Backers of Identity Security Standards Body

A new identity security standard has won the support of Microsoft, Google and other industry giants.

The State of Windows Security: What's Coming, What's Obsolete and How To Deal

For starters, it's time to throw out the concept of regular password expirations.

Beware the Ransomware You Don't Know

Don't underestimate the impact of "double extortion," warns a top Microsoft cloud security architect.

Image of a barren road

Microsoft on Security Landscape: 'The Immediate Outlook Is Pessimistic'

The gates have been well and truly breached, Microsoft warned in its fifth-annual Digital Defense Report.

Time To Take Nation-State Cyberattacks Seriously, Microsoft and Tech Leaders Warn

Microsoft is leading the growing chorus of tech giants calling for unified action against state-sponsored cyberattacks.

Just One Year of Support Left for Key Microsoft Office Apps, Servers

A raft of 2016- and 2019-branded Office solutions and servers are set to lose support next October, Microsoft warned this week.

Image of a passkey

Microsoft To Boost Passwordless Authentication in Windows 11

Microsoft is priming Windows 11 for a more passwordless future.

A lone man walking on top of a giant database cluster

The Database Admin's Security Burden

Security is everyone's job, but in a time when data is king, SQL Server admins play a more critical role than ever in their organizations' security postures.

Subscribe on YouTube