Microsoft reverses course on legal action against security researchers publishing zero-day exploits.

Microsoft's Build 2026 security news centers on an agentic AI vulnerability system designed to find real exploitable flaws, ...

A public spat between Microsoft and an independent security researcher reopens a long-running debate over who is responsible ...

Microsoft deleted the researcher's bug report account, suspended their GitHub, and threatened criminal charges, all while three zero-days remain unpatched.

Terminal B reports that Microsoft highlights the risk of "privilege creep" in AI access, urging a Zero Trust approach to ...

Microsoft urged coordinated disclosure after three Windows zero-days were actively exploited, increasing customer security ...

CISA confirms two bugs being actively exploited in the wild, as Microsoft releases patches.

KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today announced the launch of ...

Microsoft Edge loads all your saved passwords, decrypted and in plaintext, into memory at startup. Google Chrome doesn’t—is it time to switch browser?

Microsoft has confirmed a “defense-in-depth change will come to every supported version of Edge” after initially refusing to address browser password security issue.

Microsoft brings back Hayete Gallot to lead Security while Charlie Bell moves to an engineering quality mandate, both reporting to CEO Satya Nadella. Microsoft just changed who gets blamed when things ...