Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest
The post Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest appeared first on Daily CyberSecurity.
A flaw in the EngageLab SDK exposed 50 million Android users, allowing malicious apps to exploit trusted permissions and access sensitive data.
The post Microsoft: Third-Party Android Vulnerability Leaves Over 50M Users Exposed appeared first on TechRepublic.

Most organizations start by using Microsoft Copilot the way it looks in demos: type a question, get an answer. That works for exploration. For repeatable operational work, it gets expensive quickly.
You have Sentinel. You have Defender. Here is what fills the autonomous investigation gap between detection and autonomous resolution.
The post D3 Morpheus for Your Microsoft Security Environment appeared first on D3 Security.
The post D3 Morpheus for Your Microsoft Security Environment appeared first on Security Boulevard.

The LevelBlue SpiderLabs team identified phishing emails in January 2026 that use Microsoft Application Registration Redirect URI’s to abuse trust relationships and bypass spam filters to redirect users to phishing websites.
A high-severity Windows Admin Center vulnerability (CVE-2026-26119) could allow privilege escalation in enterprise environments. Here’s what to know and how to mitigate risk.
The post Microsoft: Critical Windows Admin Center Flaw Allows Privilege Escalation appeared first on TechRepublic.

In 2009, LevelBlue Vice President of Security Research Ziv Mador and Cristian Craioveanu worked at the Microsoft Malware Team and documented a notable code injection vulnerability on certain versions of Windows PowerPoint (Windows PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac.)
Microsoft issued a second emergency Windows patch in January after earlier fixes caused new bugs, raising concerns about update quality and reliability.
The post Microsoft’s Patch Fixes Are Breaking Windows, Forcing a Second Emergency Update appeared first on TechRepublic.

In 2009, LevelBlue Vice President of Security Research Ziv Mador and Cristian Craioveanu worked at the Microsoft Malware Team and documented a notable code injection vulnerability on certain versions of Windows PowerPoint (Windows PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac.)