Opinions, tips, and news orbiting Microsoft
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-62918 Microsoft Teams Spoofing Vulnerability
Improper limitation of a pathname to a restricted directory (‘path traversal’) in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
At a glance
Edge for Business security connectors extend your security tools into the browser, so you gain visibility and enforcement where work happens. This update adds new partner integrations, including Cisco Secure Access,
The post Bring your security stack into Edge for Business — with support for more partners appeared first on Windows Blog.
Continue reading Bring your security stack into Edge for Business — with support for more partners
At a glance
Edge for Business security connectors extend your security tools into the browser, so you gain visibility and enforcement where work happens. This update adds new partner integrations, including Cisco Secure Access,
The post Bring your security stack into Edge for Business — with support for more partners appeared first on Windows Blog.
Continue reading Bring your security stack into Edge for Business — with support for more partners
At a glance
Edge for Business security connectors extend your security tools into the browser, so you gain visibility and enforcement where work happens. This update adds new partner integrations, including Cisco Secure Access,
The post Bring your security stack into Edge for Business — with support for more partners appeared first on Microsoft Edge Blog.
Continue reading Bring your security stack into Edge for Business — with support for more partners
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order to deliver malware to travelers and steal credentials in an operation we call CaptiveCrunch.
The post CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft appeared first on Microsoft Security Blog.