Hackers thought to be aligned with China and Russia are suspected to be behind a wave of account takeover attacks targeting Microsoft 365 users.

A surge in phishing campaigns abusing Microsoft’s OAuth device code authorization flow has been observed with multiple threat ...

Microsoft has hustled out an out-of-band update to address a Message Queuing issue introduced by the December 2025 update.

Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

Iron Software successfully hosted Microsoft-sponsored virtual event, delivering expert insights on .NET 10 migration, AI-powered development, and performance optimization to developers across ...

VSCodium avoids this entire issue. It is a community-driven option for those who don't want the proprietary distribution pipeline. VSCodium uses special build scripts to clone that exact open-source ...

Attackers are exploiting a Flight protocol validation failure that allows them to execute arbitrary code without ...

Plus critical critical Notepad++, Ivanti, and Fortinet updates, and one of these patches an under-attack security hole ...

Human-in-the-loop (HITL) safeguards that AI agents rely on can be subverted, allowing attackers to weaponize them to run ...

Many users utilize an AI assistant to handle their inbox, leaving them vulnerable to attack. AI agents are becoming ...

This article contains 10 of what we believe to be the biggest stories we covered throughout the year on SD Times.