Microsoft: Email Exceptions Let Detected Spoofing Through
Microsoft’s Q3 report shows how mail exceptions overrode detection. The 63% figure…
Fake Teams Support Calls Led to Privileged Certificates and Data Theft
Microsoft traces two Teams help-desk scams into AD CS certificate abuse. One…
BlackX Bootkit Found a Trust Gap on Patched Windows PCs
BlackX reached patched Windows PCs that still trusted old boot components. The…
Help TDS: Fake Microsoft Support Pushes Remote Access
Infoblox traced Help TDS from a fake Windows lock to an UltraViewer…
YAM Store Takedown Hits the Wholesale Side of Phishing
Microsoft and partners disrupted YAM Store and phishing-kit suppliers. See how stolen…
Xandr Fined Over Grindr Data in Ad Auctions
Norway fined Xandr NOK 92 million over historical Grindr data sharing. How…
WindowsPackageManagerServer.exe: Is It Safe, and How Do You Fix an Error?
Check WindowsPackageManagerServer.exe, interpret firewall and signature alerts, and follow the right App…
RedFlick Turns a Phishing Invitation Into Scheduled Windows Tasks
Microsoft traces Star Blizzard’s RedFlick chain: document-looking shortcuts, remote applets and scheduled…
MSP360 Phishing Turns One Fake Invitation Into Two Remote-Access Channels
Microsoft traced fake invitations and PDF lures to MSP360, then ScreenConnect. Why…
NeedyMantis Hides Its Next Stage Behind Familiar DLL Names
Microsoft traces NeedyMantis through planted DLLs, an extensionless archive and a fake…
KB5002907 Paused After Office 2016 and 2019 Lose Activation or Disappear
Microsoft paused KB5002907 after some Office 2016 and 2019 installations lost activation…
Storm-3168 Azure Attack: What Failed, What Survived
Microsoft’s Storm-3168 case shows why failed deletion requests, application permissions and separate…