33 verified briefings on Microsoft. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Microsoft has released two open-source tools, Rampart and Clarity, to help developers secure AI agents. The tools are designed for safety verification during early development, addressing risks as AI agents gain more operational authority. This is part of Microsoft's push for continuous AI safety engineering.
Microsoft and EY are investing $1 billion over five years to accelerate enterprise AI adoption. The partnership will create integrated teams of EY's Forward Deployed Engineers and Microsoft experts to help clients implement AI projects and build their own capabilities, offering a combined engineering and innovation service.
Microsoft Research has released Data Formulator 0.7, an open-source, AI-powered system for enterprise data analytics. The tool combines data connectivity, AI agent-guided exploration, and visualization in a shared workspace. A new Data Connectors feature simplifies integration with various data sources like databases and BI systems.
Microsoft has withdrawn its proposal for a 244-acre data center campus in Caledonia, Wisconsin, following significant community opposition. The decision highlights growing local resistance to large-scale infrastructure projects, which can impact cloud service expansion plans for major tech companies and their customers.
Microsoft is highlighting the security challenges organizations face when adopting AI. As companies like St. Luke’s and ManpowerGroup move to AI-powered models, establishing a strong security foundation for cloud, data, and identity becomes essential for enabling responsible innovation and managing new risks.
Microsoft has launched MDASH, a new AI-powered security platform for large-scale vulnerability discovery. The system uses more than 100 specialized AI agents that work together to automatically scan, validate, and prove security flaws across complex codebases like Windows and other Microsoft software.
Microsoft has appointed Matthew Ball, a well-known games analyst and investor, as the new chief strategy officer for Xbox. Ball's extensive experience in analyzing market shifts is expected to help guide Xbox's hardware and console strategy as it faces increasing competition in the gaming industry.
AI presents both opportunities and significant risks for growing businesses. Cybercriminals are leveraging AI to launch more effective and targeted attacks. For example, AI-automated phishing has proven to be 4.5 times more effective than traditional methods, creating new challenges for business leaders balancing growth and security.
Microsoft has officially released Azure Linux 4.0, its first server-grade Linux distribution. The new OS is designed for cloud environments and can be run on Azure infrastructure or locally on desktops using the Windows Subsystem for Linux, marking a significant step for the company.
The US cybersecurity agency has updated its Known Exploited Vulnerabilities (KEV) catalog with seven new entries, including flaws in Microsoft Windows, Defender, and Adobe Acrobat. The additions signal that these vulnerabilities are being actively used by attackers, requiring urgent attention from IT and security teams.
Microsoft's Deputy CISO for Gaming, Aaron Zollman, discussed the unique security challenges in the gaming sector. With over 500 million monthly active players on platforms like Xbox and PC, the scale presents distinct security demands compared to traditional enterprise environments, requiring specialized strategies.
Microsoft's May security update for Windows 11 is failing for some users, leaving their systems unprotected. The installation fails and rolls back when the device's boot partition has insufficient free space. The issue occurs during the reboot phase, leaving dozens of security patches uninstalled.
A new vulnerability called YellowKey allows attackers with access to a Windows device to bypass Bitlocker encryption and access files. Microsoft is working on a permanent patch for the flaw (CVE-2026-45585) and has released temporary mitigation steps for companies to implement immediately.
A security researcher has released a proof-of-concept exploit for a new Windows zero-day vulnerability called MiniPlasma. The exploit can grant full SYSTEM privileges on fully patched Windows 11 systems. The flaw is reportedly an unfixed version of a bug Microsoft claimed to have patched in 2020.
Microsoft has released a mitigation for a BitLocker security bypass vulnerability known as "YellowKey." The zero-day flaw, tracked as CVE-2026-45585, was publicly disclosed last week and carries a CVSS score of 6.8, affecting the Windows disk encryption feature.
Microsoft details an attack where a threat actor used a single compromised identity to breach an entire cloud environment. The attack began with social engineering and escalated through Microsoft Entra ID and M365 to compromise critical Azure services, including databases and virtual machines.
A BeyondTrust report found that while Microsoft's total vulnerability count was stable in 2023, critical flaws doubled. Attackers are shifting focus from initial access to privilege escalation, using identity-based attacks to gain deeper control over systems. This trend highlights the growing importance of internal security controls.
A China-aligned hacking group known as Webworm is using new custom backdoors, EchoCreep and GraphWorm. The group leverages popular services like Discord and the Microsoft Graph API for its command-and-control communications, primarily targeting government agencies with this updated tooling, according to recent cybersecurity research.
Microsoft has taken down a major malware code-signing service that enabled ransomware groups to make their malicious software appear legitimate. The operation involved seizing a website, revoking over 1,000 abused certificates, and shutting down hundreds of virtual machines hosted on Azure.
Microsoft has disrupted a "malware-signing-as-a-service" operation run by a group called Fox Tempest. The service abused Microsoft's own code signing system to make malicious software, including ransomware, appear legitimate, compromising thousands of machines and networks globally.
Microsoft has detailed a financially motivated group called Fox Tempest that operates a service selling fraudulent code-signing certificates to other criminals. This service helps malware, including ransomware, appear legitimate to bypass security software and infect systems more easily.
Microsoft's May Security Update for Windows 11 is failing to install on some devices. The issue is caused by insufficient free space on the EFI System Partition. This leaves affected systems vulnerable, as they do not receive the dozens of security patches included in the update.
Microsoft has officially acknowledged that the May 2026 Windows 11 security update, KB5089549, is failing to install on some devices. Affected users are reporting an error code 0x800f0922, which prevents the update from completing. The company is currently investigating the issue.
Microsoft has launched three new Surface devices for business customers: the Surface Pro 12, Surface Laptop 8, and a 13-inch Laptop model. These devices feature Intel's latest Core Ultra Series 3 processors, business-centric upgrades, and notably higher starting prices.
Microsoft has launched new versions of its Surface Pro and Surface Laptop, initially featuring Intel's latest Core Ultra Series 3 processors. This strategy prioritizes Intel chips, with models powered by Qualcomm's Snapdragon X2 processors expected to be released later in the year for business customers.
Microsoft has released two open-source tools, RAMPART and Clarity, to improve the safety of AI agents. As AI systems increasingly perform actions on behalf of users, these tools help developers test for security risks and validate assumptions throughout the development workflow, making agentic AI safer.
Microsoft has released two new open-source tools, RAMPART and Clarity, to help developers improve the security of AI agents. RAMPART is a testing framework designed to identify and measure security risks in AI systems during the development phase, making it easier to build safer applications.
Microsoft is testing a resizable taskbar and Start menu in a new Windows 11 preview build for Insiders. This update, available in the Experimental channel, brings back a popular customization feature from previous Windows versions, allowing users to adjust core UI elements.
A new zero-day vulnerability in Microsoft Exchange, identified as CVE-2026-42897, is being actively exploited. The flaw is a cross-site scripting (XSS) issue that allows attackers to compromise Outlook Web Access (OWA) mailboxes. Microsoft has not yet released a patch to fix the vulnerability.
A Windows vulnerability in the Cloud Filter driver, thought to be patched six years ago, is still exploitable. A security researcher has demonstrated a new method to exploit the flaw, allowing an attacker to gain full SYSTEM-level privileges on an affected machine.
Microsoft is retiring Together Mode, a feature launched during the pandemic that used AI to place meeting participants in a shared virtual space. The move is part of a broader effort to simplify the Teams experience, removing a feature that was sometimes seen as gimmicky.
A spoofing vulnerability in Microsoft Exchange Outlook Web Access (OWA) is being actively exploited. The U.S. CISA is urging organizations to prioritize patching. Microsoft has released a fix and recommends enabling Extended Protection for Exchange Server (EEMS) to mitigate the significant risk.
The latest Visual Studio Code update introduces several enhancements, including a more context-aware Copilot for AI-assisted coding. It also adds voice-to-text dictation, improved debugging with conditional logpoints, and new accessibility audio cues. These changes aim to streamline workflows and improve the overall developer experience.