cybersecurity

Microsoft’s countdown to the end of Windows 10 has moved from calendar reminder to courtroom headline, with a California plaintiff alleging that the company’s support wind‑down needlessly jeopardizes user data and is designed to push customers into an AI‑optimized hardware refresh—an accusation...

As the countdown begins toward Windows 10’s End of Life on October 14, 2025, millions of devices face a pivotal crossroads. After this date, Microsoft will discontinue all security updates and technical support for Windows 10, leaving the popular operating system increasingly vulnerable to...

Hackers showed at Black Hat that Windows Hello for Business can be fooled into accepting an attacker’s face by swapping biometric templates on a compromised PC—an attack that works stunningly fast if the intruder already has local admin privileges. In a live demo, German researchers Tillmann...

Microsoft is facing a fresh legal challenge over the looming end of support for Windows 10, with a San Diego lawsuit accusing the company of “forced obsolescence” and a strategy to “monopolize the generative AI market” as Windows 11 and Copilot+ PCs become the default path forward. The...

In an announcement that has quickly rippled throughout the IT world, Microsoft has disclosed CVE-2025-53787, an information disclosure vulnerability affecting the Microsoft 365 Copilot BizChat feature. This vulnerability opens a concerning chapter in the evolution of enterprise AI, as...

A newly disclosed vulnerability—CVE-2025-53774—affecting Microsoft 365 Copilot BizChat has put sensitive business information at risk for organizations relying on Microsoft’s flagship AI-driven productivity suite. This security flaw enables unauthorized access to potentially confidential...

A critical security vulnerability, identified as CVE-2025-53767, has been discovered in Microsoft's Azure OpenAI service, potentially allowing attackers to escalate their privileges within affected systems. This flaw underscores the importance of robust security measures in cloud-based AI...

A critical security vulnerability, identified as CVE-2025-8579, has been discovered in Google Chrome's Gemini Live feature. This flaw, reported by security researcher Alesandro Ortiz on April 2, 2025, involves an inappropriate implementation within Gemini Live, potentially allowing unauthorized...

A fresh security vulnerability has come to light within the core of today’s most popular browsers. Tracked as CVE-2025-8577, this flaw concerns the Chromium engine’s Picture-in-Picture (PiP) feature—a component found in Google Chrome, Microsoft Edge, and a string of leading browsers. Patching...

A recent security vulnerability, identified as CVE-2025-8583, has been discovered in Google Chrome's permissions implementation. This flaw allows remote attackers to perform user interface (UI) spoofing through specially crafted HTML pages. Google has addressed this issue in Chrome version...

A torrent of controversy has swept the global tech and human rights landscape following revelations that Israel’s elite military intelligence—Unit 8200—has for years harnessed Microsoft Azure’s cloud infrastructure for one of the most sweeping mass surveillance operations ever exposed. Leaked...

A recent security vulnerability, identified as CVE-2025-8581, has been discovered in Google Chrome's Extensions component. This flaw could potentially allow remote attackers to leak cross-origin data by persuading users to perform specific actions on a crafted HTML page. Google has addressed...

A critical security vulnerability, identified as CVE-2025-8578, has been discovered in Google Chrome's Cast component, affecting versions prior to 139.0.7258.66. This "use after free" flaw poses significant risks, including potential heap corruption and arbitrary code execution, if exploited by...

In a recent security update, Google has addressed a vulnerability identified as CVE-2025-8582, which pertains to insufficient validation of untrusted input in the Document Object Model (DOM) within the Chromium project. This flaw could potentially allow attackers to execute arbitrary code or...

Chromium-based browsers, including Microsoft Edge, are once again in the spotlight as CVE-2025-8580—a critical filesystem vulnerability—has been patched in the upstream Chromium project. Microsoft’s prompt response highlights how the Edge team continues to rapidly adopt security fixes from...

A potent wave of ransomware attacks has uncovered a cunning new strategy in cybercrime: hackers are leveraging a legitimate Intel CPU tuning driver to disable Windows 11’s built-in antivirus, leaving systems dangerously exposed. The Akira ransomware, already notorious for its aggressive...

Windows Hello, long touted as the seamless and secure future of biometric login for Windows users, now finds itself under intense scrutiny following a dramatic live demonstration at this year’s Black Hat security conference in Las Vegas. Two German researchers unveiled a critical vulnerability...

NTT DATA’s launch of a dedicated global business unit for Microsoft Cloud signals a major acceleration in enterprise digital transformation, promising to reshape how organizations leverage secure, AI-powered solutions for modernization, agility, and growth in a rapidly evolving landscape. As the...

Here is a concise and professional edit and summary for the article "Zenity Labs Exposes Widespread 'AgentFlayer' Vulnerabilities Allowing Silent Hijacking of Major Enterprise AI Agents Circumventing Human Oversight" from CNHI News: Zenity Labs Uncovers Major 'AgentFlayer' Vulnerabilities...

A new high-severity security flaw in Microsoft Exchange Server hybrid deployments has placed organizations worldwide on high alert, raising the specter of a “total domain compromise” that can cascade from on-premises environments to Microsoft’s cloud. The bug, designated CVE-2025-53786, has not...