Microsoft

Windows, Windows Server, Microsoft 365, Word, Excel, PowerPoint, Outlook, OneNote, Teams, SharePoint, OneDrive, Edge, Bing, SQL Server, Visual Studio, Active Directory, Dynamics 365, Power BI, Power Apps, Xbox, Game Pass, Surface, Intune, Defender, Exchange, Hyper-V, .NET, Dataverse, Microsoft Copilot, Copilot Studio, Microsoft Fabric, Power Platform, Windows 11, Windows 10, WSL, Windows Subsystem for Linux

Page 4

Cybersecurity

How the Windows Snipping Tool’s CVE-2026-33829 Opens the Door to NTLM Hash Theft

Microsoft patched a moderate-severity flaw in the Windows Snipping Tool in the April 14, 2026 security updates that could let attackers trick the application into leaking authentication material. Tracked as CVE-2026-33829 and reported by Blackarrow (Tarlogic), the issue stems from how Snipping Tool handles certain deep links and can result in an authenticated Server Message Block (SMB) connection to an attacker-controlled server, exposing NTLMv2 hashes. What the vulnerability is CVE-2026-33829…

Saugata DattaApr 17, 20263 min read473

Microsoft

Windows Secure Boot: A practical playbook for certificates expiring in 2026

Microsoft’s Secure Boot certificates issued in 2011 are approaching their expiration window in 2026. While affected devices will continue to boot and receive regular Windows updates, they will stop receiving new protections for the pre-boot environment — updates to Windows Boot Manager, Secure Boot DB/DBX revocations, and mitigations for newly discovered boot-level vulnerabilities. Many newer PCs already include the 2023 certificates, but organizations should act now to inventory, monitor, pilot,…

Saugata DattaApr 17, 20265 min read342

Cybersecurity

Microsoft Patch Tuesday — April 2026: 168 Vulnerabilities Fixed, Including an Actively Exploited SharePoint Zero-Day

Microsoft’s April 2026 Patch Tuesday delivers a heavy set of fixes: 168 vulnerabilities across Windows, Office, Azure components and developer tools. The release includes one confirmed actively exploited zero-day in SharePoint Server (CVE-2026-32201) and a publicly disclosed elevation-of-privilege flaw in Microsoft Defender (CVE-2026-33825). Beyond those high-visibility issues, eight vulnerabilities are rated Critical — most of them Remote Code Execution (RCE) flaws — and dozens more allow elevation of privilege, information…

Saugata DattaApr 15, 20266 min read377

Cybersecurity

Micropatches for Windows Shell Bypass (CVE-2026-21510): What 0patch Fixed and Why It Matters

Microsoft released fixes earlier this year for CVE-2026-21510, a security feature bypass in Windows Explorer that let specially crafted shortcut (LNK) files execute a remotely hosted DLL without the usual security warning. Researchers observed exploitation in the wild and uploaded a sample to malware repositories, enabling vendors and defenders to reproduce the issue and protect legacy systems that no longer receive timely official updates. This post explains how the vulnerability…

Saugata DattaApr 14, 20264 min read403

Cybersecurity

How a Flippa Purchase Turned 30+ “Essential Plugin” WordPress Plugins into Backdoor Bait

Last week I encountered a supply-chain incident that felt eerily familiar but much larger in scale. A client’s dashboard had started showing a warning from the WordPress.org Plugins Team about a plugin serving code that could permit unauthorized access. A deeper dive revealed an attacker had quietly weaponized an entire portfolio of plugins—planting a backdoor that lay dormant for months before being activated to serve cloaked SEO spam and redirects.…

Saugata DattaApr 14, 20266 min read468

Microsoft

Microsoft 365 Network Disruption Hits Exchange Online, Teams, and Core Services

A sudden network-level disruption on April 8, 2026 knocked several core Microsoft 365 services offline or degraded their performance for many users. What began as a spike in telemetry and rapid customer reports at 8:37 PM IST (3:07 PM UTC) quickly became an enterprise-wide concern as Exchange Online, Microsoft Teams, and broader Microsoft 365 functionality showed interruption. Microsoft classified the event under incident ID MO1274150 and confirmed the root cause…

Saugata DattaApr 9, 20264 min read432

Microsoft

Microsoft fixes Classic Outlook bug that blocked some email sends

Microsoft has rolled out a server-side fix for a recent Classic Outlook problem that prevented some users from sending messages through Outlook.com. The issue caused non-delivery warnings and error codes for affected accounts, and the company says the change has been in production as of April 3, 2026. What happened Some Classic Outlook users received non-delivery reports (NDRs) with error codes such as 0x80070005-0x0004dc-0x000524 and the message: "This message could…

Saugata DattaApr 7, 20262 min read414

Cybersecurity

Researcher Publishes Windows Defender 0-Day ‘BlueHammer’ LPE Proof‑of‑Concept

A security researcher using the handle Chaotic Eclipse has publicly released a working proof‑of‑concept for a Windows zero‑day local privilege escalation (LPE) exploit called "BlueHammer." The disclosure, accompanied by full source code on GitHub, was confirmed as functional by vulnerability researcher Will Dormann and demonstrates that a low‑privileged local user can escalate to NT AUTHORITYSYSTEM on affected machines. The release has sparked concern across the security community because it is…

Saugata DattaApr 7, 20264 min read371

Azure

Microsoft removes Support and Recovery Assistant from Windows — what it means

Microsoft has removed the Support and Recovery Assistant (SaRA) from Windows, according to recent reports. Once a handy troubleshooting companion for Office and other Microsoft products, SaRA helped users diagnose and fix a variety of common issues. Its absence changes the options available to end users and IT teams when problems arise, but there are practical alternatives and steps you can take right now. What SaRA did and why it…

Saugata DattaApr 7, 20263 min read387

Compliance and Privacy

Announcing General Availability of Server Logic in Power Pages

Power Pages has taken a significant step forward: Server Logic is now generally available for production use. What began as a preview capability to bring server-side processing closer to makers and developers has matured into a production-ready feature designed for enterprise scenarios. With this GA release, organizations gain a native, governed, and extensible way to run server-side operations directly within Power Pages—reducing complexity, improving performance, and enabling more secure integration…

Saugata DattaApr 7, 20263 min read567

Artificial Intelligence

Microsoft Links Medusa Ransomware Affiliate to Zero-Day Exploitation Campaign

Microsoft’s recent analysis tying a Medusa ransomware affiliate to a campaign that leveraged zero-day vulnerabilities has put a renewed spotlight on the evolving tactics of extortion groups and the threat posed by previously unknown software flaws. For security teams and executives, the announcement is a reminder that threat actors are combining rapid vulnerability exploitation with tried-and-true ransomware playbooks to increase both speed and impact. What Microsoft reported and why it…

Saugata DattaApr 6, 20264 min read400

Artificial Intelligence

Anthropic opens Microsoft 365 connectors to all Claude plans — what it means for users

Anthropic has quietly broadened access to one of Claude’s most practical integrations: the Microsoft 365 connector. Once reserved for Team and Enterprise subscribers, the connector is now available across every Claude plan — including the free tier — enabling Claude to read and search content stored in Outlook, OneDrive, SharePoint, Teams and Calendar for users tied to an organization’s Microsoft Entra tenant. This change removes a friction point for many…

Saugata DattaApr 5, 20264 min read572

Free Tools: IP, DNS, SSL