Opinions, tips, and news orbiting Microsoft
Hello Windows Insiders, today we are releasing Windows 11 Insider Preview Build 26120.3964 (KB5058496) to the Beta Channel for Windows Insiders on Windows 11, version 24H2.
REMINDER:
The post Announcing Windows 11 Insider Preview Build 26120.3964 (Beta Channel) appeared first on Windows Blog.
Continue reading Announcing Windows 11 Insider Preview Build 26120.3964 (Beta Channel)
United States-based college students can now sign up for a free trial of our Microsoft 365 Personal subscription which comes with Copilot.
The post College students can get Microsoft Copilot in Microsoft 365 apps free for three months appeared first on… Continue reading College students can get Microsoft Copilot in Microsoft 365 apps free for three months
Hello Windows Insiders, we are beginning to roll out an update today for the Microsoft Copilot app on Windows via the Microsoft Store which introduces the following changes and improvements to Copilot Vision on Windows:
Highlights:
The post Copilot on Windows: Windows Insiders can now use Vision with 2 apps and new Highlights feature with 1 app appeared first on Windows Blog.
Since April 2024, the threat actor that Microsoft Threat Intelligence tracks as Marbled Dust has been observed exploiting user accounts that have not applied fixes to a zero-day vulnerability (CVE-2025-27920) in the messaging app Output Messenger, a multiplatform chat software. These exploits have resulted in collection of related user data from targets in Iraq. Microsoft […]
The post Marbled Dust leverages zero-day in Output Messenger for regional espionage appeared first on Microsoft Security Blog.
Continue reading Marbled Dust leverages zero-day in Output Messenger for regional espionage
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202 5) for more information. Continue reading Chromium: CVE-2025-4372 Use after free in WebAudio
Improper access control in Azure allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-33072 Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability
Server-Side Request Forgery (SSRF) in Azure allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2025-29972 Azure Storage Resource Provider Spoofing Vulnerability
Improper Authorization in Azure Automation allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability