Critical 7 Zip Vulnerability With Public Exploit Requires Manual Update
A critical security flaw (CVE-2025-11001) in 7-Zip has a public exploit. Learn why this high-risk vulnerability is dangerous and how to manually update to version 25.01 now.
Microsoft
Tycoon2FA Launches Nearly 1 Million Attacks Targeting Office 365 Accounts
Tycoon2FA, a sophisticated phishing-as-a-service platform tracked by Microsoft as Storm-1747, has emerged as the dominant threat targeting Office 365 accounts throughout 2025. The cybercriminal operation has launched an aggressive campaign involving ne…
Microsoft has ‘ripped off the NHS’, says MP amid call for contracts with British firms
Samantha Niblett highlighted government’s multi-billion-pound deals with Microsoft and ‘getting locked in’Microsoft has “ripped off the NHS”, it was alleged in parliament on Wednesday, as MPs called on ministers to divert more of the government’s multi…
Trump officials announce $1bn loan to restart Three Mile Island nuclear plant
Facility that was site of worst nuclear disaster in US history will provide power for Microsoft datacentersThe Trump administration has announced a $1bn federal loan to restart the nuclear power plant at Pennsylvania’s Three Mile Island that is under c…
Largest Azure DDoS Attack Powered by Aisuru Botnet
Microsoft said the DDoS attack was aimed at an endpoint in Australia and reached 15.72 Tbps and 3.64 Bpps.
The post Largest Azure DDoS Attack Powered by Aisuru Botnet appeared first on SecurityWeek.
Microsoft Teams Adds Option to Report Misidentified Threat Messages
Microsoft Teams is rolling out a new feature that allows users to misreport messages flagged as security threats. The capability, rolling out by the end of November 2025, targets organizations using Microsoft Defender for Office 365 Plan 2 or Microsoft…
Microsoft Unveils Security Enhancements for Identity, Defense, Compliance
Microsoft announced new security capabilities for Defender, Sentinel, Copilot, Intune, Purview, and Entra.
The post Microsoft Unveils Security Enhancements for Identity, Defense, Compliance appeared first on SecurityWeek.
Microsoft Adds Azure Firewall With AI-Powered Security Copilot
Microsoft has integrated Azure Firewall with its AI-powered Security Copilot platform, bringing natural language threat investigation capabilities to cloud network security teams. The new integration allows security analysts to investigate malicious ne…
Microsoft Adds New Threat Briefing Agent Inside Defender Portal
Microsoft announced significant enhancements to its threat intelligence capabilities at Ignite 2025, including the full integration of the Threat Intelligence Briefing Agent into the Microsoft Defender portal. These updates aim to help security teams t…
Microsoft Azure Blocks 15.72 Tbps Aisuru Botnet DDoS Attack
Microsoft Azure halted a record 15.72 Tbps DDoS attack from the Aisuru botnet exposing risks created by exposed home devices exploited in large-scale cyber attacks.