Search

58 extensions still rely on Manifest V2 in the Edge Add-On Store, with only three lacking MV3 alternatives as Microsoft ends support for the older platform. Users can move to uBlock Origin Lite or similar replacements.

Compromised websites are pulling malicious instructions from the BNB Chain to deliver malware through fake CAPTCHA prompts. Microsoft says the attacks trick visitors into running the payloads on Windows devices.

Microsoft Edge is advancing its extensions platform to Manifest Version 3, the Chromium standard it first committed to in 2020. The move follows ongoing work with developers to update the ecosystem.

18 months after launch, Microsoft has retired the Teams Live chat widget for website support. The feature is now in the company's growing list of discontinued experiments.

An attacker reportedly phished access to a US defense supplier's Microsoft 365 account, reaching engineering files and potentially export-controlled technical data.

Microsoft disclosed critical vulnerability CVE-2026-59115 in the Entra Provisioning Service. The path traversal issue enables an authorized attacker to elevate privileges over a network. It receives a CVSS score of 9.9 and was published on August 6, 2026.

Microsoft Teams has a CVSS 7.5 vulnerability from improper cryptographic signature verification. An attacker can spoof identities over the network without authentication.

200 accounts were compromised after hackers exploited vulnerabilities in Switzerland's federal Microsoft SharePoint servers.

Microsoft 365 Copilot reached hundreds of millions of users with agent reasoning. The Work IQ Developer Tools preview now supplies the missing layer for building production agents on top of it.

Microsoft EVP Charles Lamanna is building a Copilot Super App as a single front door for the company's AI products. The effort aims to consolidate its expanding lineup and establish Microsoft as the Copilot company.

Microsoft removed domain exclusion from Microsoft 365 Copilot days after adding the option. An allow list approach may prove more practical for admins.

Microsoft quantum chief Zulfi Alam says his team does not need to prove it engineered a new state of matter. He views external validation as unnecessary for the company's computing push.

Microsoft removed its 32 GB RAM recommendation from Windows 11 guidance. 8 GB laptops are returning to the Surface lineup.

Disclosures show most of Microsoft's AI sales trace to its OpenAI partnership.

Microsoft is directing its developers to default to OpenAI's top model in GitHub Copilot. The move leverages existing IP rights in the partnership as part of an internal efficiency effort.

A macOS ClickFix campaign now routes infostealer lures through browser-fingerprinting gates instead of serving them openly. The shift complicates infrastructure detection while opening new defender telemetry paths.

Microsoft is reportedly telling engineers to curb excessive token consumption in Copilot projects, shifting emphasis to measurable results instead of high usage figures.

£270 million in pre-owned Microsoft licenses now sits at the center of a tribunal review that also touches a multibillion-pound class action. The cases center on how reseller claims intersect with broader licensing disputes.

Greatness phishing-as-a-service has added RingCentral spoofing to its adversary-in-the-middle and device-code attacks against Microsoft 365 accounts.

Microsoft is extending Zero Trust controls to AI agents and DevSecOps pipelines with new tools and implementation guidance.

Microsoft Defender isolated a compromised QNET endpoint in 128 seconds, stopping a multi-stage ransomware attack before the payload could persist or spread.

$20M in Microsoft bug bounties is now in reach this year as AI tools push vulnerability reports higher and the company widens payout rules to match the volume.

Microsoft tied a global campaign targeting hotel Wi-Fi networks to Russian actor Midnight Blizzard, with custom malware used to access Microsoft 365 accounts.

CVSS 7.4 type confusion flaw CVE-2026-66321 in Microsoft Edge allows remote attackers to execute code over the network.

CVSS 8.1 origin validation error in Microsoft Edge allows an unauthorized attacker to disclose information over a network.

CVSS 7.4 vulnerability CVE-2026-65802 hits Microsoft Edge for Android. External control of file name or path lets an unauthorized attacker disclose information over a network.

Apple proposed a project plan on June 26 to add iPhone-to-Windows copy and paste in the EU. Microsoft had requested the feature through Apple's DMA interoperability system, with evaluation underway since March.

8 GB Windows 11 systems will get memory reductions from Microsoft by the end of 2026. The company is addressing the OS's current RAM demands on that hardware tier.

Microsoft Teams is rolling out interface safeguards that block accidental clicks from ending a video call or triggering other unintended actions. The changes target common meeting mishaps in the desktop app.