Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

Professional software distribution dictates that software maintainability, assurance, and protection against tampering are achieved through code signing; it is a must. It takes time and effort to ...

It's an absolute beast with over 700 fixes and active zero-days landing right as major SQL and SharePoint versions hit end of support.

Windows 11 can now build, run, and manage Linux containers on its own, without Docker Desktop in the background. Microsoft calls this WSL Containers, and after installing the preview and running a few ...

A phishing campaign that has been targeting hotels across Europe and Asia since April 2026 is exploiting a fundamental flaw in how enterprise email security works — routing malicious messages through ...

PowerShell has evolved into a powerful scripting language that’s essential for system administrators and IT professionals alike. Whether you’re managing a network of servers or automating repetitive ...

From VS Code to Azure's free tier, here are 50 Microsoft tools you can try for free right now, organized by category ahead of Build 2026 on June 2-3.

Microsoft Defender Experts identified an active cryptojacking campaign in which malicious download sites are surfaced not only through traditional search engine poisoning, but also through AI chatbot ...

Unsafe defaults in MCP configs open servers to possible remote code execution, as evidenced by several commercial services and open-source projects. AI agent building tools enable users to configure ...

A new campaign has leveraged the ClickFix social engineering tactic as a way to distribute a previously undocumented malware loader referred to as DeepLoad. "It likely uses AI-assisted obfuscation and ...

I'd like to thank my coauthors Adrian Schipor, Victor Vrabie, Marius Baciu, and Martin Zugec for their invaluable contributions to this research. This research provides a direct look at the new ...