Microsoft Fixed Eighteen Cloud Flaws Before Customers Could Touch Them
The fixes were real, but there was no update button for customers. The affected layer sat inside Microsoft's cloud control plane.
Microsoft
A Million Fake CEO Emails Tried to Make Finance Pay a ServiceNow Invoice That Wasn’t Real
A million-plus email campaign combined fake executive approval, a forged ServiceNow invoice and an invented forwarded conversation to seek nearly $50,000 transfers.
September’s Windows Updates Can Freeze Remote Desktop and Leave Administrators Outside
Microsoft says September’s Windows security updates can destabilise Remote Desktop Services, break sign-ins and leave virtual machines reachable only through their management console.
Two Windows Flaws Were Already Under Attack When Microsoft’s 974-CVE Patch Tuesday Landed
Microsoft has confirmed exploitation of two Windows privilege-escalation vulnerabilities. One can break out of an AppContainer on older Windows systems; the other affects the Update Stack on current Windows releases. Together, they turn partial access into a race for SYSTEM.
September Patch Tuesday Forces Restarts Across Windows While Two Flaws Are Already Under Attack
Microsoft’s September security release is not a simple highest-score-first exercise. Two Windows flaws are already being exploited, several network services expose unauthenticated remote-code paths, Outlook can be attacked without a click, and even hotpatch-enrolled systems face a restart. Here is the order businesses should use.
Your Forgotten SQL Server Just Landed on CISA’s Emergency List
CISA has added a seven-year-old Microsoft SQL Server vulnerability to its exploited list, turning forgotten database instances into an urgent incident-response problem.
Your Chinese Subsidiary Downloaded the Right Software From the Wrong Site
Microsoft says a China-focused campaign is rebuilding malicious installers between downloads, making familiar names and file hashes unreliable clues.
Windows 11 KB5120998 verwijderen | How to uninstall KB5120998
KB5120998 may reset cursor styling, wallpaper and text rendering on some Windows 11 PCs. This Dutch and English guide explains when and how to remove the optional update safely.
Microsoft Calls KB5120998 “Non-Security.” It Still Changes Admin Privileges, Agent Isolation and Enterprise Automation.
Microsoft labels KB5120998 a non-security preview, but it changes administrator protection, AI process isolation, WMIC availability, post-quantum TLS and enterprise deployment behaviour.
Microsoft Defender’s Cleanup Driver Can Become the Tool That Removes Defender.
BTR Reforged shows how Microsoft Defender’s own signed boot-time cleanup driver can be redirected to remove endpoint protection after administrative compromise.