Windows Security

Windows Security | News, how-tos, features, reviews, and videos

Microsoft integrates SOC capabilities with Defender for enterprises

The preview hands E5 and E7 customers SOC tools that once cost extra, and puts a price on everything else.

By Gyana Swain

Sep 24, 20265 mins

Endpoint ProtectionSecurity Operations CenterWindows Security

Windows bug incorrectly tells users that Microsoft Defender Antivirus is turned off

By Evan Schuman

Aug 31, 20266 mins

Anti MalwareEndpoint ProtectionWindows Security

Articles

Microsoft patches two zero-day flaws in Defender

CISA has added the Microsoft Malware Protection Engine and Microsoft Defender Antimalware Platform vulnerabilities to its KEV catalog, suggesting exploitation in the wild.

By Lucian Constantin

May 21, 2026 3 mins

Endpoint ProtectionWindows SecurityZero-Day Vulnerabilities

Microsoft is working on a patch for 'YellowKey' attack on Bitlocker, offers temporary fix

Exploitation requires physical access, so enterprises should look to their device security policies.

By Maxwell Cooter

May 20, 2026 4 mins

EncryptionWindows SecurityZero-Day Vulnerabilities

Microsoft disrupts malware code-signing service used by ransomware gangs

Cybercriminals paid between $5,000 and $9,000 to make their malware harder to detect on Windows, highlighting its effectiveness and a shift in how the cybercrime market operates.

By Lucian Constantin

May 19, 2026 3 mins

CybercrimeMalwareWindows Security

Microsoft May security patch fails for some due to boot partition size glitch

Consultants see the problem eating away at valuable patch resources because of a lack of Microsoft update hygiene.

By Evan Schuman

May 18, 2026 5 mins

Endpoint ProtectionSecurityWindows Security

‘Patched’ Windows bug resurfaces 6 years later as working SYSTEM-level exploit

Elevation of privilege flaw in Cloud Filter driver reappears, raising concerns over regression vulnerabilities in Windows.

By Shweta Sharma

May 18, 2026 5 mins

Endpoint ProtectionVulnerabilitiesWindows Security

Microsoft’s new AI system finds 16 Windows flaws, including four critical RCEs

The agentic tool, codenamed MDASH, will open to enterprise customers in private preview in June.

By Gyana Swain

May 13, 2026 5 mins

Endpoint ProtectionVulnerabilitiesWindows Security

Another Microsoft Defender privilege escalation bug emerges days after patch

New PoC shows how Microsoft Defender can be tricked into rewriting malicious files into protected locations, enabling SYSTEM-level privilege escalation on fully patched Windows systems.

By Shweta Sharma

Apr 17, 2026 3 mins

Endpoint ProtectionSecurityWindows Security

Microsoft’s Windows Recall still allows silent data extraction

A cybersecurity researcher says Recall’s redesigned security model does not stop same-user malware from accessing plaintext screenshots and extracted text, without admin rights or exploits.

By Gyana Swain

Apr 16, 2026 5 mins

Endpoint ProtectionVulnerabilitiesWindows Security

ClickFix techniques evolve in new infostealer campaigns

Recent social engineering schemes involving WordPress and Microsoft’s Windows Terminal show that this relatively basic tactic is a growing threat.

By Lucian Constantin

Mar 16, 2026 4 mins

CybercrimeSocial EngineeringWindows Security

March Patch Tuesday: Three high severity holes in Microsoft Office

Good news: No zero days. But Azure admins should note nine holes to plug.

By Howard Solomon

Mar 10, 2026 8 mins

Endpoint ProtectionVulnerabilitiesWindows Security

Four new reasons why Windows LNK files cannot be trusted

By putting conflicting metadata in LNK files, a researcher found four new ways to spoof targets, hide arguments, and run unintended programs in Windows Explorer.

By Shweta Sharma

Feb 13, 2026 4 mins

Endpoint ProtectionSecurityWindows Security