Microsoft Security Response News Today

Microsoft has rolled out emergency out-of-band (OOB) security updates to address a critical memory leak issue affecting select versions of Windows Server domain controllers (DCs), causing servers to freeze and restart.

A Russian hacking group gained access to some email accounts of Microsoft senior leaders, the software giant disclosed in a regulatory filing Friday afternoon.

Findings from the cybersecurity team show that the hacker group was after information about itself.

Microsoft, a frontrunner in the tech industry, has introduced an AI bug bounty program to deal with the rapidly evolving security landscape.

Microsoft has released its September 2023 Patch Tuesday update, resolving multiple security vulnerabilities found in its product offerings.

A government-aligned attacker tried using a Microsoft vulnerability to attack U.S. and E.U. government targets.

Threat actors already are exploiting vulnerability, dubbed ‘Follina’ and originally identified back in April, to target organizations in Russia and Tibet, researchers said.

While Microsoft may be quick to point out security vulnerabilities in other companies products, its own software is far from infallible. A good example of this is the recently discovered Follina security hole that affects Microsoft Office.

Threat actors could gain access to a user’s account by leveraging a new type of technique that involves pre-hijacking an account before it’s actually registered by the victim.

Microsoft will now offer higher rewards for high-impact flaws found in Microsoft 365, Dynamics 365 and Power Platform.