Search

Microsoft published manual mitigations for WSUS servers experiencing sync delays and timeouts during Windows Update scans. The steps address a known issue that causes scans to fail for affected administrators.

Protesters derailed a PNW Climate Week closing event by confronting Microsoft CSO Melanie Nakagawa over data center energy use tied to AI expansion. The fireside chat with a GeekWire reporter was halted as concerns about carbon goals were raised.

The Document Foundation says OOXML's ISO certification does not ensure consistent rendering outside Microsoft Office. Only the company's own apps can be trusted with the files.

Appointments set for 2050 are hiding commands for the HOLLOWGRAPH malware campaign inside Microsoft 365 calendars. The operators use Redmond's own cloud sync to retrieve instructions and exfiltrate data.

Microsoft is expanding Azure's AI and HPC infrastructure with additional AMD hardware. The update adds more AMD-based instances for large-scale training and simulation workloads.

AMD's first rack-scale AI system, Helios, now counts four hyperscale buyers. • Microsoft • Meta • OpenAI • Oracle

AMD and Microsoft expanded their partnership to deliver a full stack of AMD AI solutions for Azure, spanning GPUs, CPUs, networking, and software. Microsoft will deploy AMD Helios for frontier model inference.

Microsoft is addressing WSUS server sync delays and timeouts that have persisted for more than a week. The company confirmed it is working on a fix for the known issue.

Microsoft is overhauling File Explorer search in Windows 11 to fix its long-standing performance issues. The update targets the feature's slowest areas after years of user avoidance.

Microsoft shipped KB5121767 as an out-of-band fix after the July Windows 11 updates triggered shutdowns on some Dell systems. The patch targets the regression without requiring a full monthly cycle.

Microsoft is seeing a surge in ACR Stealer malware campaigns aimed at enterprise customers, harvesting browser passwords, auth tokens, and documents.

Microsoft ends OneDrive support for Windows 10 versions before 22H2 next month. Version 22H2 keeps access through 2028.

Microsoft Security will present supply chain research and AI trust sessions at Black Hat USA 2026, including hands-on labs and an evening reception.

8GB of RAM is now the base spec on Microsoft's $950 Surface Laptop 13-inch. Windows 11 still struggles with it.

Microsoft disclosed CVE-2026-58598, a high-severity race condition in the Windows Backup Engine. An authorized local attacker can exploit it to elevate privileges on multiple Windows 10 and Windows 11 releases. The flaw carries a CVSS score of 7.0. No patches appear in the July 16 NVD record.

From late April to mid-June 2026, Microsoft Defender Experts tracked increased ACR Stealer activity. Campaigns used ClickFix lures to pull browser credentials, authentication tokens, and enterprise documents.

Nadella told staff that Anthropic's Fable restrictions "doesn't make sense," even as Microsoft continues work on private-data model refinements.

Microsoft open sourced Comic Chat, the 1990s IRC client that rendered conversations as comic strips. The code is available on GitHub.

Microsoft's Secure Boot contained a flaw that left it open to bypass for roughly a decade. Affected systems need current firmware and OS updates.

Microsoft announced that Windows 11 24H2 Home and Pro editions will stop receiving updates in 90 days. Windows 10 Enterprise LTSB 2016 faces the same cutoff.

Microsoft deleted a 25-year-old account after it was hacked, removing the owner's OneDrive files, digital games, and his son's baby pictures rather than restoring access.

A Windows zero-day exploit called HiveLegacy reportedly dropped the same day Microsoft released a record number of patches. The flaw is described as a powerful primitive with potential for further abuse.

Microsoft 365 apps are affected by CVE-2026-55898, a high-severity vulnerability with a CVSS score of 7.1. An out-of-bounds read in Excel allows local information disclosure by an unauthorized attacker.

Microsoft canceled this month's Patch Tuesday for some Dell users after devices began shutting down unexpectedly and overheating. Affected models have not been named.

Microsoft Windows DNS carries CVE-2026-50465, a CVSS 7.1 flaw that lets an authorized local attacker tamper with data.

Microsoft fixed more security vulnerabilities in Windows 11 this month than in any previous month. The push comes as attackers increasingly use AI to find flaws.

Microsoft Excel contains a heap-based buffer overflow vulnerability, CVE-2026-50675, with a CVSS score of 7.8 that allows local code execution.

Microsoft's Universal Disk Format File System driver contains an elevation of privilege vulnerability, CVE-2026-49790, rated 7.3 on CVSS.

Microsoft's Windows App Store contains a use of uninitialized resource vulnerability, CVE-2026-49165, rated CVSS 7.1 and allowing local information disclosure.

Microsoft Office SharePoint contains a critical deserialization flaw, CVE-2026-58644, that lets an unauthenticated attacker run code over the network.

Microsoft Copilot has a critical command injection flaw, CVE-2026-48561, that lets an attacker execute code over the network.

Microsoft rolled out its July Patch Tuesday update for Windows 11, adding the option to pause updates for up to 35 days at a time with repeated extensions.

Microsoft Threat Intelligence tracked ShinyHunters-linked activity abusing OAuth in SaaS apps through vishing, supply-chain compromises, and misconfigured guest access.

Satya Nadella warned companies to lock down their IP against frontier AI labs. The Microsoft chief's comments highlight a sharper stance toward the labs Redmond once funded heavily.

Microsoft is updating the Windows Search Box for Insiders with less clutter and added controls for faster, more relevant results.

Microsoft is applying AI to spot Windows vulnerabilities for future security updates. Only the highest-confidence results reach engineers, with humans still handling decisions and fixes.

Microsoft AI is powering a lifelike avatar of Theodore Roosevelt at the new presidential library in Medora, North Dakota. Visitors can ask the avatar questions about his life, leadership and legacy.

Microsoft's Copilot now flags processes that might be slowing down a PC. The feature itself takes up a noticeable chunk of system RAM.

Microsoft Edge contains an untrusted pointer dereference vulnerability tracked as CVE-2026-58596 with a CVSS score of 8.3. The flaw lets an attacker elevate privileges over a network.

Microsoft Edge contains a high-severity deserialization flaw, CVE-2026-58281 with CVSS 8.3, that lets an attacker run code over the network.

Microsoft's climate-warming emissions surged 25 percent, driven by its AI infrastructure buildout.

Samsung Gallery will stop syncing with Microsoft OneDrive in September 2026. Users will need another backup option before then.

Microsoft identified GigaWiper, a Windows backdoor that bundles at least three malware families including wipers and ransomware into one modular package.

Microsoft released its July 2026 progress report on the Secure Future Initiative, detailing work on secure foundations, AI-powered defense, and future-ready cybersecurity.

Microsoft's emissions rose 25% in a year, driven by AI datacenter construction.

Microsoft Teams added a Workspace Check-in feature last month. It records employee locations when users sign into a workspace.