Tag
News and blog posts tagged Microsoft on AppSecNews.
News Cyber Attacks
Attackers used a compromised credential for the ConnectWise Cloud Backup app, formerly SkyKick, to sign in to customers' Microsoft 365 tenants. Huntress confirmed unauthorized sign-ins in 162 tenants, and ConnectWise has suspended Cloud Backup, SaaS Security and Cloud Management while it investigates.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Microsoft's October 2026 updates fix more than 1,400 vulnerabilities, a record, including CVE-2026-96951, a Windows Shell flaw exploited in the wild that bypasses Mark of the Web protections. CISA gave US federal agencies until 16 October to patch it.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
From 13 October 2026, Microsoft stops new security updates for Office 2021, Office LTSC 2021, Windows 11 Home and Pro version 24H2, and Year 3 of Extended Security Updates for Windows Server 2012 and 2012 R2.
Jaydeep Bhatt