Search

Microsoft is addressing WSUS server sync delays and timeouts that have persisted for more than a week. The company confirmed it is working on a fix for the known issue.

Microsoft is overhauling File Explorer search in Windows 11 to fix its long-standing performance issues. The update targets the feature's slowest areas after years of user avoidance.

Microsoft shipped KB5121767 as an out-of-band fix after the July Windows 11 updates triggered shutdowns on some Dell systems. The patch targets the regression without requiring a full monthly cycle.

Microsoft is seeing a surge in ACR Stealer malware campaigns aimed at enterprise customers, harvesting browser passwords, auth tokens, and documents.

Todd Howard called Microsoft's Xbox cuts "very difficult for our teams." The Bethesda head noted the impact on staff after recent layoffs and project shifts.

Microsoft ends OneDrive support for Windows 10 versions before 22H2 next month. Version 22H2 keeps access through 2028.

Microsoft Security will present supply chain research and AI trust sessions at Black Hat USA 2026, including hands-on labs and an evening reception.

8GB of RAM is now the base spec on Microsoft's $950 Surface Laptop 13-inch. Windows 11 still struggles with it.

Valve's Steam Machine review calls the hardware a compromised console that shines with indie games yet leaves Sony, Microsoft, and Nintendo in control of living-room play.

Microsoft restored a 25-year-old account to a Dutch streamer after a hack, following sustained player pressure. The incident highlights how little ownership players retain over decades-old digital libraries.

Microsoft disclosed CVE-2026-58598, a high-severity race condition in the Windows Backup Engine. An authorized local attacker can exploit it to elevate privileges on multiple Windows 10 and Windows 11 releases. The flaw carries a CVSS score of 7.0. No patches appear in the July 16 NVD record.

From late April to mid-June 2026, Microsoft Defender Experts tracked increased ACR Stealer activity. Campaigns used ClickFix lures to pull browser credentials, authentication tokens, and enterprise documents.

Nadella told staff that Anthropic's Fable restrictions "doesn't make sense," even as Microsoft continues work on private-data model refinements.

US and Canadian video game unions filed charges with the NLRB accusing Microsoft of bad faith bargaining over Xbox. The complaints center on contract talks with affected workers.

Microsoft open sourced Comic Chat, the 1990s IRC client that rendered conversations as comic strips. The code is available on GitHub.

Microsoft's Secure Boot contained a flaw that left it open to bypass for roughly a decade. Affected systems need current firmware and OS updates.

Microsoft says id Tech remains safe after the id Software layoffs. Former staffers say the cuts removed everyone who could maintain the engine.

Microsoft announced that Windows 11 24H2 Home and Pro editions will stop receiving updates in 90 days. Windows 10 Enterprise LTSB 2016 faces the same cutoff.

Microsoft explained why Tony Hawk's Pro Skater 1+2 was pulled from the upcoming Xbox Game Pass schedule. The title was set to arrive but no longer appears on the list.

Microsoft deleted a 25-year-old account after it was hacked, removing the owner's OneDrive files, digital games, and his son's baby pictures rather than restoring access.

A Windows zero-day exploit called HiveLegacy reportedly dropped the same day Microsoft released a record number of patches. The flaw is described as a powerful primitive with potential for further abuse.

Microsoft 365 apps are affected by CVE-2026-55898, a high-severity vulnerability with a CVSS score of 7.1. An out-of-bounds read in Excel allows local information disclosure by an unauthorized attacker.

Microsoft canceled this month's Patch Tuesday for some Dell users after devices began shutting down unexpectedly and overheating. Affected models have not been named.

Microsoft Windows DNS carries CVE-2026-50465, a CVSS 7.1 flaw that lets an authorized local attacker tamper with data.

Microsoft fixed more security vulnerabilities in Windows 11 this month than in any previous month. The push comes as attackers increasingly use AI to find flaws.

Microsoft Excel contains a heap-based buffer overflow vulnerability, CVE-2026-50675, with a CVSS score of 7.8 that allows local code execution.

Microsoft's Universal Disk Format File System driver contains an elevation of privilege vulnerability, CVE-2026-49790, rated 7.3 on CVSS.

Microsoft's Windows App Store contains a use of uninitialized resource vulnerability, CVE-2026-49165, rated CVSS 7.1 and allowing local information disclosure.

Microsoft Office SharePoint contains a critical deserialization flaw, CVE-2026-58644, that lets an unauthenticated attacker run code over the network.

Microsoft Copilot has a critical command injection flaw, CVE-2026-48561, that lets an attacker execute code over the network.

Microsoft rolled out its July Patch Tuesday update for Windows 11, adding the option to pause updates for up to 35 days at a time with repeated extensions.

Microsoft Threat Intelligence tracked ShinyHunters-linked activity abusing OAuth in SaaS apps through vishing, supply-chain compromises, and misconfigured guest access.

Satya Nadella warned companies to lock down their IP against frontier AI labs. The Microsoft chief's comments highlight a sharper stance toward the labs Redmond once funded heavily.

Microsoft is updating the Windows Search Box for Insiders with less clutter and added controls for faster, more relevant results.

Microsoft is applying AI to spot Windows vulnerabilities for future security updates. Only the highest-confidence results reach engineers, with humans still handling decisions and fixes.

Microsoft AI is powering a lifelike avatar of Theodore Roosevelt at the new presidential library in Medora, North Dakota. Visitors can ask the avatar questions about his life, leadership and legacy.

Xbox users can now claim 32 packs of Black Ops 2 DLC for free on the Microsoft Store.

Microsoft reportedly never canceled the Ryse series. Work on it simply stopped.

Microsoft's Copilot now flags processes that might be slowing down a PC. The feature itself takes up a noticeable chunk of system RAM.

Microsoft lost a lawsuit to an Xbox gamer and must restore the account and digital library while paying roughly $400 in damages.

Microsoft Edge contains an untrusted pointer dereference vulnerability tracked as CVE-2026-58596 with a CVSS score of 8.3. The flaw lets an attacker elevate privileges over a network.

Microsoft Edge contains a high-severity deserialization flaw, CVE-2026-58281 with CVSS 8.3, that lets an attacker run code over the network.

Microsoft's climate-warming emissions surged 25 percent, driven by its AI infrastructure buildout.

Samsung Gallery will stop syncing with Microsoft OneDrive in September 2026. Users will need another backup option before then.

A Brazilian Xbox gamer won a lawsuit against Microsoft, forcing the company to unlock their account and restore access to a blocked digital library.

Microsoft communications lead Frank X. Shaw called reports linking H-1B visas to the Xbox layoffs bad information. He said those workers represent a small percent of staff and are not specific to the division.

Microsoft identified GigaWiper, a Windows backdoor that bundles at least three malware families including wipers and ransomware into one modular package.

Microsoft released its July 2026 progress report on the Secure Future Initiative, detailing work on secure foundations, AI-powered defense, and future-ready cybersecurity.

Microsoft's emissions rose 25% in a year, driven by AI datacenter construction.

Microsoft Teams added a Workspace Check-in feature last month. It records employee locations when users sign into a workspace.

Microsoft's filing lists 379 total layoffs at ZeniMax. 213 came from ZeniMax Online Studios, the team behind Elder Scrolls Online.

Microsoft's carbon emissions rose 25% in its latest sustainability report, driven by AI energy demands and pressuring its 2030 carbon-negative target.

GigaWiper is a destructive backdoor that folds wiping and ransomware capabilities from multiple malware families into one platform. Microsoft published a breakdown of its code and detection guidance.

Microsoft put SharePoint Copilot Apps into public preview. The feature adds guided workflows and deterministic actions to Microsoft 365 Copilot.

Forg365 reportedly combines AI-generated lures with adversary-in-the-middle and device code attacks in a new phishing-as-a-service operation targeting Microsoft 365 accounts.

Microsoft will disable OWA Light, the lightweight Outlook Web App client, in a future Exchange Server update.

AMD is contributing MRC to the Open Compute Project with OpenAI and Microsoft. The networking spec targets AI cluster bottlenecks and is already running in test deployments.

Microsoft is using its Secure Future Initiative to continuously evaluate live cloud services against security requirements at AI speed.

Threat actors are vishing Microsoft 365 users with fake requests to enroll Entra passkeys, BleepingComputer reports. The campaign has hit organizations across multiple sectors.