Microsoft offers voluntary severance to about a quarter of staff
The offer covers U.S., Canada, India, and UK roles at VP level or below, while data centers, sales, cybersecurity, and quantum stay out.
45
Vendor
Microsoft
- Mentions · 7d141
- Mentions · 30d551
- All mentions1.3K
- First seenAug 11, 2026
- Last mentioned15h ago
Timeline
1,255 articles · newest firstFake Teams IT help desk sessions abused AD CS for domain access
Two Microsoft-disclosed intrusions used Quick Assist plus ESC1 or ESC8, then DCSync and Rclone in one case.
74
Google says AI Mode's lower monetization is weighing on Search
The same digest covers Anthropic dropping Claude Ultra's 5-hour cap and several new model releases.
52
OpenAI, Google, Microsoft and Anthropic back shared AI scrape opt-out
Anthropic already honors the robots.txt token; Google and Microsoft plan support next year, and OpenAI says coming months.
58
Microsoft and UC Berkeley release TokenEconomizer for coding agents
On 277 SWE-Bench tasks it cut mean cost 18.4% to 30.9% across five agent-model settings without changing weights.
46
Teams help-desk lures led to AD CS ESC1 and ESC8 abuse
Two unattributed intrusions used Quick Assist; one reached DCSync and exfiltration after a privileged identity was excluded from containment.
73
Kaspersky finds NetamLoader in Windows update files on Asian government systems
One malicious Resources.resx starts layered XAML that bypasses AMSI and beacons to openaigpt4v[.]com after a long delay.
72
NetamLoader hides in Windows 10 update packages aimed at Asian governments
Kaspersky saw one victim in the first half of 2026 and says Patch My PC itself was not compromised.
72
Kaspersky finds NetamLoader on one Asian government Windows system
The loader uses signed Microsoft components, can hide activity, and its delivery path is unconfirmed.
72
Microsoft fixes Windows 11 Remote Desktop failures for non-admins
KB5127936, out October 28, clears error 0xC000000D on hosts with Administrator protection; Windows Server is not affected.
38
Hackers publish work details on more than 41,000 DHS employees
The Icepick dump lists ICE, CBP and CISA contacts and internal groups; DHS calls it a potential breach.
76
Microsoft fixes Always On VPN failures from September Windows 11 updates
KB5127936 stops connections stuck on Connecting or reporting a port already in use; a single-protocol workaround remains.
36
Embedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop flawed
Forever Security’s EMBRACE findings show prompt injection, address spoofing, and local file reads; Codex and VS Code were still unpatched.
74
Wikimedia urges courts to split AI training from chatbot copying
In an amicus brief, Wikimedia says unlicensed LLM pre-training can be fair use, but query answers that replace the source need a license.
52
Microsoft fixes Windows 11 Remote Desktop failures after recent updates
Non-admin sessions failed with error 0xC000000D on hosts using Administrator protection after the September 22 preview.
48
2026 ranking places Exabeam first among nine UEBA platforms
The editorial list scores nine vendors, not ten, after the Exabeam–LogRhythm merger, with no lab testing.
18
Fake IT help desk calls led to remote access and VYPR ransomware
Cisco Talos says callers often knew only names and emails, and one Quick Assist session ended in ransomware.
68
Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
72
ThreatsDay: Fortinet fixes, PHP2Shell scans, Authenticator token flaw
Fortinet is withholding flaw details until November 10 while Hudson Rock reports 40,573 exposed FortiGate secrets.
64
Ransomnews counts 484,142 listable cloud buckets holding 18 billion files
An October 7 snapshot found 321,058 credential and key files without opening any objects, and the authors say many buckets are public on purpose.
64
Unreleased Claude built exploit chains for Chrome, Safari, and major OSes
Anthropic says the model made five exploits, including Android data theft and Linux root code execution; vendors have patched.
74
Ubuntu fixes .NET debug-proxy and Brotli flaws
The earlier Blazor debug-proxy fix in USN-8942-1 was incomplete and only dotnet10 and dotnet11 were affected.
58
IDC MarketScape names Microsoft a leader in endpoint security
The September 2026 assessment cites Defender attack disruption, generally available Security Copilot, and cross-platform coverage.
24
Microsoft offers voluntary buyouts to about 60,000 employees
Staff in the US, UK, Canada and India have until December to accept terms close to ordinary severance.
42
Azure API Connection flaws enable cross-tenant compromise
The researcher says five issues paid $200,000 and can reach Key Vault, Azure SQL and services such as Jira.
76
Wiz says AI agents are running hands-on intrusions
Named cases include ARTEX at Korean banks and ConnectWise, Hermes at Thailand's finance ministry, and AI-assisted API attacks in Japan.
68
Microsoft fixes Remote Desktop failures after recent Windows updates
KB5127936, released October 28, restores non-admin connections that failed with error 0xC000000D when Administrator protection is enabled.
46
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
74
Explainer: three ways AI agents already control employee browsers
Debugging protocols, in-browser agents and WebMCP can act inside signed-in sessions that logs may attribute to the user.
28
Google unveils Gemini 4 Carbon with leading cyber benchmarks
Access is limited to some cyber defenders under Fairwind, and Google says it resisted every tested indirect prompt injection.
76
Fake Anthropic preview invites phish Google and Microsoft logins
Cofense says the lures use GoTo Webinar branding, a URL shortener, and two CAPTCHA pages before credential prompts.
52
Windows 11 KB5127936 preview brings 41 non-security changes
The optional October 2026 preview moves 25H2 and 26H2 to builds 26200.9818 and 26300.9818 and may add one Secure Boot restart.
26
Microsoft will retire Entra ID SMS and voice sign-in in February 2027
Worldwide and GCC tenants must move telephone-only users to passkeys or another provider before February 1, 2027.
46
Five-bug chain escapes Edge sandbox without memory corruption, earns $175,000 at Pwn2Own
Orange Tsai combined logical flaws in Edge and Windows features to gain code execution from an ordinary web page with no clicks; patch status is unconfirmed.
55
GitHub previews npm firewall that blocks packages at install
Enterprise Cloud customers can enforce malware advisories, severity, attestations, new install scripts and a package-age cooldown.
44
Microsoft urges Entra ID admins to replace SMS and voice with passkeys
Retirement of Microsoft-provided phone authentication starts February 1, 2027, in Worldwide and Government Community Cloud tenants.
42
Pen test: domain-joined Windows 7 server yielded domain admin via EternalBlue
A leetspeak insult password was a real domain admin credential; the outdated domain-joined machine, not a weak password, was the entry point.
24
Edge exploit chain uses five logic bugs to escape the sandbox
Orange Tsai’s Pwn2Own Berlin chain turns a malicious page into Windows code via UXSS and a writable protocol config, without memory corruption.
74
Buyer’s guide ranks 11 UEBA tools for 2026
The verdict treats merged Exabeam and LogRhythm as one vendor and scores explainability, coverage, deployment, tuning and pricing.
16
2026 buyer’s guide ranks 12 SOAR platforms by team fit
The research-based guide splits tools into SIEM-bundled, playbook, no-code, and intel-led lanes and flags Revelstoke as absorbed.
18
Related CVEs
by mentions- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-688209%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- CVE-2026-656608%8.8Authenticated Code Injection RCE in Microsoft SharePoint Server
- CVE-2026-694141%7.8Local Elevation of Privilege in Microsoft Defender Malware Protection Engine
- Untrusted search path in Microsoft .NET Framework
Appears with
- Microsoftorganization · 320
- Googlevendor · 211
- Windowsproduct · 190
- Microsoft 365product · 147
- OpenAIvendor · 96
- Anthropicvendor · 90
- CISAorganization · 85
- OpenAIorganization · 72
- Windows 11product · 70
- Anthropicorganization · 65
- Microsoft Teamsproduct · 63
- Microsoft Defenderproduct · 61
- Claudeai model · 58
- Huntressorganization · 56
- SharePointproduct · 48
- Palo Alto Networksvendor · 46
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.