Security & Compliance

Microsoft Security Research reports active cloud-based intrusions in which passkey, MFA, or SSO themes are used as social-engineering pretexts. The point is not that passkeys are weak. Microsoft describes how a convincing passkey message can lead users into adversary-in-the-middle phishing or device-code authentication, after which compromised identities are used across Microsoft Graph, SharePoint, OneDrive, and … Read more

Microsoft has released the September 2026 Security Updates and marked two Windows vulnerabilities in MSRC as already exploited. For small and midsized businesses, this is more than a routine patch notice: both issues are local elevation-of-privilege vulnerabilities, both can allow SYSTEM privileges if exploited successfully, and Microsoft marks both with “Customer Action Required: Yes”. What … Read more

Microsoft Threat Intelligence describes a phishing campaign that moves a technique known from AI security research into conventional email attacks: ASCII smuggling. The attackers inserted invisible Unicode tag characters into words such as “funding” so filters or tokenizers no longer saw one clean string. Microsoft also gives concrete detection and protection guidance for Microsoft Defender … Read more

Microsoft has released the August 2026 Security Updates. For small and midsized businesses, the key point is not the sheer number of vulnerabilities but one Windows issue that Microsoft already marks as exploited: CVE-2026-68820 in the Windows Ancillary Function Driver for WinSock. In the Security Update Guide, Microsoft lists it as “Exploitation Detected”. That moves … Read more

Correction dated August 9, 2026: We could not find an official Microsoft announcement for watermarking AI-generated or AI-edited content specifically within Microsoft 365 Copilot. The earlier version of this article presented the capability as announced; there is currently no reliable primary source for that claim. What is officially documented today As of the date above, … Read more