Everything RedTeam Log has reported about Microsoft: 7 stories, newest first. Part of our Vulnerabilities coverage.
Analysis confirms servers linked to Storm-2945 continue delivering malicious payloads long after initial security reports, challenging assumptions about threat actor downtime.
Microsoft and Japan dismantle a marketplace that sold fake accounts and kits, stopping a network that targeted 75,000 organisations with over one billion scam messages.
Attackers exploit a Windows Shell flaw to bypass file warnings. Microsoft’s October update fixes this active threat among 1,413 vulnerabilities.
Microsoft patches an algorithmic complexity vulnerability in .NET runtimes that allows unauthenticated network-based denial of service attacks.
A memory error in Windows SmartScreen allows local attackers to raise their access level without user interaction, prompting urgent patching.
An unpatched flaw in Microsoft’s DNS service allows remote attackers to run code, rated critical with a CVSS score of 9.8.
Microsoft releases updates for 1,415 flaws including an exploited Windows Shell bypass and critical remote code execution vulnerabilities across its ecosystem.