security incident

SonicWall has confirmed a cloud‑backup compromise that exposed firewall configuration preference files stored in certain MySonicWall accounts, and customers who used the service are being urged to act immediately to contain and remediate potential follow‑on attacks. SonicWall’s notice —...

A fresh security vulnerability has come to light within the core of today’s most popular browsers. Tracked as CVE-2025-8577, this flaw concerns the Chromium engine’s Picture-in-Picture (PiP) feature—a component found in Google Chrome, Microsoft Edge, and a string of leading browsers. Patching...

Semperis has unveiled a critical design flaw in Windows Server 2025's delegated Managed Service Accounts (dMSAs), termed "Golden dMSA." This vulnerability allows attackers to generate service account passwords, facilitating undetected, persistent access across Active Directory environments...

A critical security vulnerability, identified as CVE-2025-49730, has been discovered in the Microsoft Windows Quality of Service (QoS) Scheduler Driver. This flaw, stemming from a time-of-check to time-of-use (TOCTOU) race condition, allows authorized attackers to escalate their privileges on...

Windows 11 administrators and power users are no strangers to the occasional glitch that follows major feature updates, but the latest concerns raised by a firewall error after the June 2025 non-security preview update (KB5060829) have attracted uncommon attention. After installing this update...

Microsoft Copilot, touted as a transformative productivity tool for enterprises, has recently come under intense scrutiny after the discovery of a significant zero-click vulnerability known as EchoLeak (CVE-2025-32711). This flaw, now fixed, provides a revealing lens into the evolving threat...

Microsoft’s relentless push to embed AI deeply within the workplace has rapidly transformed its Microsoft 365 Copilot offering from a novel productivity assistant into an indispensable tool driving modern enterprise creativity. But as recent events around the EchoLeak vulnerability have made...

In a landmark event that is sending ripples through the enterprise IT and cybersecurity landscapes, Microsoft has acted to patch a zero-click vulnerability in Copilot, its much-hyped AI assistant that's now woven throughout the Microsoft 365 productivity suite. Dubbed "EchoLeak" by cybersecurity...

Microsoft 365 Copilot, one of the flagship generative AI assistants deeply woven into the fabric of workplace productivity through the Office ecosystem, recently became the focal point of a security storm. The incident has underscored urgent and far-reaching questions for any business weighing...

Windows users awoke to an unexpected security complication this spring, as a quietly delivered April update from Microsoft introduced a mysterious new folder—"inetpub"—to countless Windows 11 systems. The resulting confusion, fueled by unclear initial guidance from Microsoft and hasty responses...

A wave of concern has swept across the IT security landscape following Cisco’s disclosure of critical vulnerabilities in its Identity Services Engine (ISE) and Customer Collaboration Platform (CCP) tools. Most worryingly, one freshly unearthed flaw in ISE cloud deployments—tracked as...

Microsoft's recent developer conference was notably disrupted by a pro-Palestinian protest, highlighting ongoing internal tensions over the company's business engagements. During CEO Satya Nadella's keynote address, firmware engineer Joe Lopez interrupted, accusing Microsoft of complicity in...

Microsoft’s deployment cadence for Windows security updates is a well-oiled machine, but even the most robust processes can encounter unexpected turbulence—especially when the complexities of enterprise endpoints and hardware interplay. The release of out-of-band update KB5061768 on May 19...

Microsoft Defender for Endpoint, a vital layer in countless enterprise security stacks, has recently been flagged with a concerning security vulnerability: CVE-2025-47161. This newly publicized elevation of privilege (EoP) vulnerability has potential implications for a broad range of...

Improper access controls have long been regarded as one of the most impactful vulnerabilities plaguing both cloud and traditional application environments. The recent disclosure of CVE-2025-33072—a Microsoft Azure vulnerability affecting the msagsfeedback.azurewebsites.net endpoint—has again...

Commvault, a prominent enterprise data backup and recovery solutions provider, recently disclosed a significant security incident involving the exploitation of a zero-day vulnerability, identified as CVE-2025-3928, within its Microsoft Azure environment. This breach, attributed to an...

In the rapidly evolving digital landscape, safeguarding Microsoft 365 data against cyber threats has become paramount for organizations worldwide. The upcoming session titled "Incident Response H07: Protecting Microsoft 365 Data from Cyber Attacks," scheduled for May 15, 2025, from 2:15 PM to...

It was one of those weekends when IT administrators around the world were either catching up on much-needed rest or, if superstition holds any currency, knocking on wood in hope that nothing out-of-the-ordinary would grace their outboxes come Monday. Alas, dear reader, tranquility was not on the...

By way of introduction, I am Chris Betz, the leader of the Microsoft Security Response Center (MSRC). I’m stepping in to fill the shoes of Mike Reavey, who has moved on to become the General Manager of Secure Operations, still within Trustworthy Computing. Since joining the MSRC, I’ve spent...

Toshiba website hacked – email addresses and passwords exposed | Naked Security