Vulnerabilities
GitHub and Microsoft launch ReviewBench AI code review benchmark
GitHub and Microsoft have released ReviewBench, an open benchmark for evaluating AI code review tools using 219 real-world pull requests.
#Microsoft
Every Cybersecurity story tagged Microsoft.
Vulnerabilities
Windows 11 KB5124010 update crashes apps using AC-3 audio
Microsoft confirms the optional September 2026 KB5124010 preview update for Windows 11 causes crashes in some games and applications that use AC-3 audio decoding.
Vulnerabilities
China-Nexus Actor UAT-11587 Uses Antino Backdoor
Cisco Talos details a China-nexus threat actor, UAT-11587, using a Rust-based backdoor called Antino that leverages Microsoft 365 services for covert communications.
Threats
Microsoft Warns of Passkey Phishing Cloud Attacks
Microsoft details two campaigns: one blasting CEO-impersonation invoice scams and another using passkey-themed social engineering to hijack Microsoft cloud accounts.
Threats
Phishing Campaign Abuses Microsoft 365 Direct Send Feature
A phishing campaign exploiting Microsoft 365's Direct Send feature sent nearly 30,000 emails, primarily during US Eastern business hours, to bypass email security gateways.
Vulnerabilities
Microsoft Patches Record 974 Flaws, Two Exploited Zero-Days
Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two Windows zero-days under active exploitation. The U.S.
Vulnerabilities
Arctic Wolf Exposes Microsoft 365 Data Theft Campaign
A threat cluster tracked as PREY-0058 is using fake IT calls and proxy sign-ins to steal data from executives for extortion, according to Arctic Wolf.
Vulnerabilities
Anthropic locks Claude accounts after infostealer malware
Anthropic is locking users out of Claude accounts due to login sessions compromised by infostealer malware. Separately, nearly 22,000 Microsoft Exchange servers remain unpatched against a critical flaw, CVE-2026-62911.
Threats
Microsoft Warns of High-Volume Phishing Campaign Using Invisible Unicode
Microsoft has alerted of a phishing campaign using invisible Unicode tag characters to split financial keywords and evade email filters.
Vulnerabilities
Microsoft and Adobe Patch Critical Vulnerabilities
September 2026's Patch Tuesday follows a record-breaking August with 398 CVEs patched. Experts highlight actively exploited SharePoint and Exchange flaws, while Microsoft works on a fix for the 'ShieldBreak' Defender vulnerability.