Microsoft

Windows, Windows Server, Microsoft 365, Word, Excel, PowerPoint, Outlook, OneNote, Teams, SharePoint, OneDrive, Edge, Bing, SQL Server, Visual Studio, Active Directory, Dynamics 365, Power BI, Power Apps, Xbox, Game Pass, Surface, Intune, Defender, Exchange, Hyper-V, .NET, Dataverse, Microsoft Copilot, Copilot Studio, Microsoft Fabric, Power Platform, Windows 11, Windows 10, WSL, Windows Subsystem for Linux

Page 6

Cybersecurity

Stryker Confirms Massive Wiper Strike — Thousands of Devices Erased in Alleged Iran-Linked Operation

Stryker, the global medical technology company, confirmed on March 11, 2026, that it suffered a significant, destructive cyberattack that disabled large parts of its corporate Microsoft environment and resulted in the wiping of thousands of devices. The company characterized the incident as a deliberate data-destruction operation rather than a ransomware extortion scheme, and investigators and security firms have pointed to an Iran-linked threat actor claiming responsibility. What happened Stryker reported…

Saugata DattaMar 17, 20264 min read521

Automation

Microsoft Plans to Disable Hands‑Free Automated Installation for Windows 11 and Server 2025 After Critical RCE Flaw

Microsoft has announced a hardening plan for Windows Deployment Services (WDS) after the discovery of a critical remote code execution vulnerability, CVE-2026-0386, that compromises hands‑free automated installations. The vulnerability exposes Unattend.xml answer files over an unauthenticated channel, allowing an attacker on the same network segment to intercept or tamper with deployment configurations. For organizations that depend on network-based provisioning to deploy Windows at scale, this presents a significant operational and…

Saugata DattaMar 16, 20264 min read548

Cybersecurity

Hotpatch Alert: Microsoft Fixes Critical RRAS Remote-Execution Flaws in Windows 11

Microsoft issued an out-of-band hotpatch on March 13, 2026, to address a set of serious vulnerabilities in the Windows Routing and Remote Access Service (RRAS) management tool that affect Windows 11. The update, tracked as KB5084597 and aimed at OS builds 26200.7982 (25H2) and 26100.7982 (24H2), patches three CVEs that can allow a remote attacker to disrupt RRAS or execute code on a connected device. The fix is delivered as…

Saugata DattaMar 15, 20264 min read644

Microsoft

Windows 11 February Patch (KB5077181) Can Make Drive C Inaccessible on Some Samsung PCs

Microsoft has updated its Windows 11 documentation to describe a recently discovered issue tied to the February 2026 Patch Tuesday update (KB5077181). On certain machines—predominantly Samsung consumer laptops—installing that update can result in an error that prevents access to the system drive, showing “C: is not accessible – Access denied.” The problem can go beyond a simple File Explorer error and, in some cases, block common applications and administrative actions.…

Saugata DattaMar 14, 20263 min read512

Microsoft

March 10, 2026 — KB5079473 for Windows 11 (OS Builds 26200.8037 and 26100.8037)

Microsoft released KB5079473 on March 10, 2026. The update is identified by the OS builds 26200.8037 and 26100.8037 and appears on Microsoft’s support site as a cumulative update for Windows 11. What the entry shows KB identifier and date: The article is titled “March 10, 2026 — KB5079473 (OS Builds 26200.8037 and 26100.8037)” and is published on Microsoft’s official support site. Target builds and versions: The update is listed for…

Saugata DattaMar 12, 20262 min read643

Cybersecurity

Microsoft Active Directory Domain Services Vulnerability (CVE-2026-25177) — What Administrators Need to Know

In early March 2026, Microsoft released an important security update addressing a high-severity vulnerability in Active Directory Domain Services (AD DS) tracked as CVE-2026-25177. The flaw received a CVSS score of 8.8 and can allow an authenticated network actor with limited permissions to escalate privileges to full SYSTEM on a targeted domain controller. Microsoft and third-party researchers coordinated fixes and guidance; administrators should prioritize applying the supplied updates and monitoring…

Saugata DattaMar 12, 20264 min read620

Cybersecurity

Zombie ZIP: How Malformed Archives Can Hide Malware from Security Scanners

A new archive-manipulation technique called “Zombie ZIP” lets attackers conceal payloads inside ZIP files in a way that can evade many antivirus and endpoint detection solutions. The method was described by security researcher Chris Aziz of Bombadil Systems and has drawn warnings from CERT/CC and the wider security community. This post explains how Zombie ZIP works, what research and evidence exist today, which tools are affected, and pragmatic steps defenders…

Saugata DattaMar 11, 20264 min read545

Cybersecurity

Microsoft .NET Out-of-Bounds Read (CVE-2026-26127) Causes Remote Denial-of-Service Risk

Microsoft has issued an emergency security update to address a newly disclosed vulnerability in the .NET ecosystem that can be triggered remotely and results in denial-of-service (DoS) conditions. The flaw, tracked as CVE-2026-26127, affects multiple .NET runtime and package versions across Windows, macOS, and Linux. Administrators and developers should prioritize applying the available patches to prevent service disruption. What the vulnerability is CVE-2026-26127 is an out-of-bounds read vulnerability (CWE-125). An…

Saugata DattaMar 11, 20263 min read591

AI Agents and Frameworks

Microsoft Copilot Cowork: Automating Multi-Step Workflows Inside Microsoft 365

Microsoft announced Copilot Cowork as a new Copilot capability for Microsoft 365 that moves beyond single-response assistance to plan-and-execute workflows across Microsoft 365 apps and files. Cowork converts a user’s intent into a structured plan, runs the plan across supported apps and data sources, and surfaces checkpoints that require user confirmation before applying changes. The feature is positioned to operate within existing Microsoft 365 security and governance controls and is…

Saugata DattaMar 10, 20263 min read628

Artificial Intelligence

Introducing the Azure Skills Plugin: Practical Azure Workflows for Coding Agents

The Azure Skills Plugin brings curated Azure expertise and an execution layer together so coding agents can do more than offer generic guidance. Rather than just suggesting commands or linking to documentation, the plugin packages decision logic (skills) and structured tools (MCP servers) so agents can reason about workflows and, when appropriate, run actions against real Azure resources. What the plugin is The plugin is a single install that combines…

Saugata DattaMar 10, 20264 min read696

Cybersecurity

Zero-Day on the Market: $220K Exploit Targets Windows Remote Desktop Services (CVE-2026-21533)

Remote Desktop Services (RDS) has come under renewed scrutiny after reports that a working exploit for CVE-2026-21533 — an elevation-of-privilege vulnerability in Windows Remote Desktop Services — was listed for sale on a dark web forum for $220,000. The listing and surrounding reporting are factual and straightforward: a recently created account advertised a claimed zero-day exploit, observers recorded the posting, and vendor and government advisories identify the underlying vulnerability and…

Saugata DattaMar 9, 20264 min read572

Cybersecurity

Clipboard Trap: ClickFix Now Abuses Windows Terminal to Deliver Lumma Stealer

A newly observed wave of ClickFix social-engineering attacks has shifted tactics, hijacking Windows Terminal as its execution environment to deliver credential-stealing malware. Security researchers from Microsoft and other vendors tracked this campaign in early 2026 and reported a reliable pattern: victims are manipulated into pasting an obfuscated command from their clipboard into a legitimate-looking terminal window, which then decodes and executes a multi-stage payload that ultimately harvests browser-saved credentials. Why…

Saugata DattaMar 7, 20264 min read805

Free Tools: IP, DNS, SSL