For June, Patch Tuesday means an IT scramble

Microsoft’s monthly update included 206 fixes for flaws in everything from Windows to Office to Exchange Server, not to mention three zero-days.

Why a Windows Hello PIN Beats a Password for Enterprise Security

With phishing and AI-driven identity attacks rising, Windows Hello PIN security depends on TPM-backed keys, enterprise ...
InfoQ

AI Model Context Protocol Adds Centralised Auth for Enterprise

Managed Authorisation extension to stable status, adding a centralised way for organisations to control access to MCP servers ...
The Hill

FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users

The FBI released an urgent security warning to the public about a fast-acting scam targeting Microsoft 365 users on Teams, Outlook and OneDrive. The agency warned that the hacking platform Kali365 ...
Bleeping Computer

Microsoft patches Exchange Server zero-day exploited in attacks

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web ...

Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

Attackers used Azure CLI and ROPC to expose Microsoft 365 MFA gaps, showing why admins need tighter Conditional Access and ...
Ars Technica

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...