Four Unit 42 Vulnerability Researchers Make MSRC Top 100 for 2018Palo Alto Unit 42·Jun 10, 16:34 UTC · Jun 10, 2019Vulnerability30
Researchers share of FabriXss bug impacting Azure Fabric ExplorerSecurity Affairs·Oct 19, 15:14 UTC · Oct 19, 2022VulnerabilityCVE-2022-3582935
Unit 42 Researchers Recognized in MSRC Top 100 ListPalo Alto Unit 42·Sep 6, 08:11 UTC · Sep 6, 2018Vulnerability30
Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows SystemsSecurity Affairs·Jul 15, 16:57 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-33825CVE-2026-45498CVE-2026-4109160
Microsoft’s agentic security system found four critical Windows RCE flawsHelp Net Security·May 13, 00:00 UTC · May 13, 2026VulnerabilityCVE-2026-40361CVE-2026-40364160
Microsoft fixes Entra ID flaw enabling privilege escalationSecurity Affairs·Apr 28, 11:19 UTC · Apr 28, 2026Vulnerability55
Microsoft Launches Windows Resiliency Initiative to Boost Security and System IntegrityThe Hacker News·Nov 20, 11:49 UTC · Nov 20, 2024Vulnerability55
Super FabriXss flaw in Microsoft Azure SFX could lead to RCESecurity Affairs·Mar 31, 20:37 UTC · Mar 31, 2023VulnerabilityCVE-2023-23383CVE-2022-3582960
Critical Microsoft Azure RCE flaw impacted multiple servicesSecurity Affairs·Jan 19, 16:02 UTC · Jan 19, 2023Vulnerability55
Microsoft Azure Vulnerability Exposes PostgreSQL Databases to Other CustomersThe Hacker News·Apr 29, 12:04 UTC · Apr 29, 2022Vulnerability in the wild60
Linux worm spreading via Exim servers hit Azure customersSecurity Affairs·Jun 16, 16:28 UTC · Jun 16, 2019Vulnerability in the wildCVE-2019-1014960
Zingbox now part of the Microsoft Active Protections ProgramHelp Net Security·Apr 8, 00:00 UTC · Apr 8, 2019Vulnerability55
Chaotic Eclipse Unveils RoguePlanet Exploit Targeting Fully Patched WindowsSecurity Affairs·Jun 10, 09:45 UTC · Jun 10, 2026VulnerabilityCVE-2026-33825CVE-2026-45498CVE-2026-4109160
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege EscalationThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-33825CVE-2025-48804160
Microsoft on pace to break annual vulnerability record as AIThe Record·May 13, 12:59 UTC · May 13, 2026Vulnerability in the wildCVE-2026-41089CVE-2026-41096CVE-2026-4289860
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch TuesdayThe Hacker News·Mar 2, 10:36 UTC · Mar 2, 2026VulnerabilityCVE-2026-21513CVE-2026-21509160
APT28 Uses Microsoft Office CVE-2026-21509 in EspionageThe Hacker News·Feb 4, 16:49 UTC · Feb 4, 2026VulnerabilityCVE-2026-21509147
Microsoft Releases Patch for Exploited Office Zero DayInfosecurity Magazine·Jan 27, 10:45 UTC · Jan 27, 2026Vulnerability in the wildCVE-2026-21509160
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Integrating Threat Intelligence and Vulnerability Management: A Modern ApproachRecorded Future·Dec 17, 00:00 UTC · Dec 17, 2025Vulnerability in the wild60
Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215)Help Net Security·Nov 12, 00:00 UTC · Nov 12, 2025Vulnerability in the wildCVE-2025-62215CVE-2025-60724CVE-2025-62199+1 CVEs60
Zero Day Quest returns: Microsoft ups the stakes with $5M bug bountySecurity Affairs·Aug 5, 17:51 UTC · Aug 5, 2025Vulnerability55
Microsoft announces Zero Day Quest hacking event with big rewardsHelp Net Security·Nov 19, 00:00 UTC · Nov 19, 2024Vulnerability55
Microsoft urges customers to fix Windows RCE in the TCP/IP stackSecurity Affairs·Aug 16, 07:10 UTC · Aug 16, 2024Vulnerability in the wildCVE-2024-38063CVE-2024-38189CVE-2024-38178+4 CVEs60
Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by HackersThe Hacker News·Jun 10, 11:55 UTC · Jun 10, 2024Vulnerability in the wild60
Threat Brief: OMI Vulnerabilities (CVE-2021-38645, CVE-2021-38647, CVE-2021-38648 and CVE-2021Palo Alto Unit 42·Jun 6, 01:21 UTC · Jun 6, 2024VulnerabilityCVE-2021-38645CVE-2021-38647CVE-2021-38648+1 CVEs160
Linux Devs Rush to Patch Critical Vulnerability in ShimInfosecurity Magazine·Feb 8, 16:30 UTC · Feb 8, 2024VulnerabilityCVE-2023-4054760
Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux DistrosThe Hacker News·Feb 8, 03:11 UTC · Feb 8, 2024VulnerabilityCVE-2023-40547CVE-2023-40546CVE-2023-40548+3 CVEs60
Google, Microsoft increase bug bountiesHelp Net Security·Dec 14, 13:34 UTC · Dec 14, 2023Vulnerability55
October Patch Tuesday Addresses Three ZeroInfosecurity Magazine·Oct 11, 10:30 UTC · Oct 11, 2023Vulnerability in the wildCVE-2023-41763CVE-2023-36563CVE-2023-44487+8 CVEs160
Researchers Uncover XSS Vulnerabilities in Azure ServicesInfosecurity Magazine·Jun 14, 14:00 UTC · Jun 14, 2023Vulnerability55
Microsoft Azure 'AutoWarp' Bug Could Have Let Attackers Access Customers' AccountsThe Hacker News·Mar 8, 17:51 UTC · Mar 8, 2022Vulnerability55
Palo Alto Networks Unit 42 Vulnerability Research December 2017 DisclosuresPalo Alto Unit 42·Jan 28, 21:27 UTC · Jan 28, 2022VulnerabilityCVE-2017-1188660
Unit 42 Vulnerability Research January 2018 DisclosuresPalo Alto Unit 42·Jan 28, 21:27 UTC · Jan 28, 2022VulnerabilityCVE-2018-076260
Microsoft warns of a new unpatched Windows Print Spooler RCE zeroSecurity Affairs·Aug 12, 07:52 UTC · Aug 12, 2021VulnerabilityCVE-2021-3695860
Bug bounty hunter awarded $50,000 for a Microsoft account hijack flawSecurity Affairs·Mar 3, 15:55 UTC · Mar 3, 2021Vulnerability30
Microsoft announces limited Azure Sphere bug bounty programHelp Net Security·May 6, 00:00 UTC · May 6, 2020Vulnerability30
Microsoft Patch Tuesday for August 2019 patch 93 bugs, including wormable issuesSecurity Affairs·Aug 14, 07:05 UTC · Aug 14, 2019VulnerabilityCVE-2019-1181CVE-2019-1182CVE-2019-1222+3 CVEs60
August 2019 Patch Tuesday: Microsoft plugs critical wormable RDP holesHelp Net Security·Aug 14, 00:00 UTC · Aug 14, 2019VulnerabilityCVE-2019-1181CVE-2019-1182CVE-2019-1222+10 CVEs60
Linux servers under attack via latest Exim flawHelp Net Security·Jun 16, 14:39 UTC · Jun 16, 2019Vulnerability in the wildCVE-2019-1014960