CISOs face resiliency trade-offs as Microsoft accelerates its security patching guidance in response to AI, with the potential for other vendors to follow suit.

By John Leyden

Jul 23, 2026 7 mins

Endpoint ProtectionPatch Management SoftwareWindows Security

Google must open Android to rival AI agents, EU orders

The move has implications for CISOs as well, says an industry expert.

By Maxwell Cooter

Jul 17, 2026 2 mins

Android SecurityEndpoint ProtectionMobile Security

New Windows Bind Link techniques let attackers evade EDR, security controls

The File-Binding, Process-Binding and Silo-Binding techniques abuse Windows filesystem virtualization features to present trusted files to security products while malware executes undetected.

By Shweta Sharma

Jul 15, 2026 4 mins

Endpoint ProtectionSecurityWindows Security

Malicious Chromium extension spoofs Perplexity AI to hijack browser searches

Researchers say attackers are extending AI-themed social engineering from phishing campaigns to browser extensions.

By Gyana Swain

Jun 30, 2026 5 mins

Browser SecurityEndpoint ProtectionSecurity

3 Tips for surviving the patch apocalypse

Security teams must automate patching for the most critical vulnerabilities, without interrupting the business.

By Ivanti

Jun 22, 2026 4 mins

Endpoint ProtectionSecurity

Threat actor adds advanced 'EDR killer' tools to ransomware-as-a-service platform

Traditional EDR defense is under threat after a criminal group added a sophisticated capability to shut it down, warns ESET.

By John E. Dunn

Jun 19, 2026 4 mins

CybercrimeMalwareRansomware

Microsoft broke some OLE automations with latest Windows update

Third-party applications can no longer open Office documents for you.

By Maxwell Cooter

Jun 19, 2026 2 mins

Endpoint ProtectionSecurityWindows Security

GreatXML zero-day BitLocker bypass doesn’t seem to work, yet

Researcher’s feud with Microsoft continues to escalate with new Windows zero-day flaw that an experience vulnerability expert says doesn’t work as advertised.

By Lucian Constantin

Jun 12, 2026 5 mins

Endpoint ProtectionWindows SecurityZero-Day Vulnerabilities

June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’

AI discovery is unleashing the flood of zero days and other CVEs, so enterprises should prepare for larger Patch Tuesdays in future.

By John E. Dunn

Jun 10, 2026 6 mins

Business IntelligenceWindows SecurityZero-Day Vulnerabilities

HTTP/2’s speed abused to slow webserver performance in DoS attack

Researchers disclose an HTTP/2 denial-of-service technique affecting major web servers after AI-assisted analysis uncovered a flaw linked to HTTP/2 configurations.

By Shweta Sharma

Jun 8, 2026 4 mins

Browser SecurityCyberattacksDDoS

Hole in GitHub’s browser-based VSCode editor could lead to stolen token

Its disclosure raises questions about what security researchers should expect from vendors, and how far in advance of its publication they should notify vendors about a bug.

By Howard Solomon

Jun 3, 2026 7 mins

Browser SecurityEndpoint ProtectionGitHub

Microsoft previews automatic device isolation in Defender for Endpoint

The new capability will be added to the automatic attack disruption tool, however, new research warns that the tool has to be tuned to avoid it becoming an attack vector.

By Howard Solomon

May 26, 2026 7 mins

CyberattacksCybercrimeEndpoint Protection

Google leaks details for Chromium bug that can turn browsers into bots

Reported over three years ago and allegedly still not properly fixed, the vulnerability enables attacks to execute JavaScript across browser restarts.

By Lucian Constantin

May 22, 2026 4 mins

Browser SecurityEndpoint ProtectionSecurity

View all

Microsoft integrates SOC capabilities with Defender for enterprises

Google’s Early Access is creating a blind spot for malicious apps

Attackers are weaponizing the gap between Chromium fixes and Chrome patches

Windows bug incorrectly tells users that Microsoft Defender Antivirus is turned off

Trusted Chrome, Edge extensions weaponized in supply chain campaign

Windows Defender’s own driver can leave systems defenseless

New macOS malware turns stolen browsers into attacker-controlled sessions

Fake CCleaner downloads turn Chrome into a credential-stealing surveillance tool

A Scattered Spider member was indicted. Microsoft’s GDID went to trial.

Articles

Microsoft’s 3-day patching directive comes with added operational risk