The US Cybersecurity and Infrastructure Security Agency (CISA) retired ten Emergency Directives (ED) it issued between 2019 ...

Microsoft has backed away from its plan to introduce a limit of 2,000 emails per day in Exchange Online. The change, announced in 2024 and set to go into effect last year, was aimed at reducing the ...

SlowMist found critical vulnerabilities at two exchanges with $3.7 billion and $240 million daily volumes. ICRYPEX and Azbit reportedly ignored security notices, forcing SlowMist to publicly disclose ...

Microsoft announced on Monday that it will soon block mobile devices running outdated email software from accessing Exchange Online services until they're updated. As the Exchange Team explained, ...

CVE-2025-55182 (also referred to as React2Shell and includes CVE-2025-66478, which was merged into it) is a critical pre-authentication remote code execution (RCE) vulnerability affecting React Server ...

The company’s new approach is that anything touching Microsoft services is eligible for a bug bounty, regardless of its source. Today’s AI-enabled attackers are agnostic: They’re not limiting ...

Microsoft introduced a major shift to its security strategy with a new bug bounty model called In Scope by Default. The change signals a stronger commitment to protecting users, raising transparency ...

Microsoft Corp. announced today that it is expanding its bug bounty program with a new policy that brings all of its online services, including those supported by third-party and open-source ...

Microsoft now pays security researchers for finding critical vulnerabilities in any of its online services, regardless of whether the code was written by Microsoft or a third party. This policy shift ...