Copilot Studio agents are increasingly powerful. With that power comes risk: small misconfigurations, over‑broad sharing, ...

The AgreeTo add-in for Outlook has been hijacked and turned into a phishing kit that stole more than 4,000 Microsoft account ...

Understanding the New Security Imperative for Generative AI in the Enterprise Introduction: How Microsoft Copilot Is Transforming Enterprise Security Risk Microsoft Copilot is changing the way ...

A Microsoft Outlook add-in was abandoned and taken over by hackers, who used it to collect email accounts and banking data.

Discover the best enterprise SSO providers for EdTech and Education SaaS in 2026, comparing security, scalability, compliance ...

Microsoft is hedging its OpenAI bet by building its own models, chips, and leverage — so “Copilot everywhere” never depends ...

First malicious Outlook add-in abused an abandoned domain to host a fake Microsoft login page, stealing 4,000+ credentials in ...

Chaos-inciting fake news right this way A single, unlabeled training prompt can break LLMs' safety behavior, according to ...

Legacy email integrations, third-party apps, and in-house tools must move to Microsoft Graph before EWS is disabled for good.

The zero-day flaw CVE-2026-21513 is a security bypass bug targeting MSHTML, the proprietary engine of the default Web browser in Windows. CVE-2026-21514 is a related security feature bypass in ...

Also today, SAP released 27 new and updated security notes, including two that address critical-severity vulnerabilities.

Microsoft has announced that Exchange Web Services (EWS) for Exchange Online will be fully shut down on April 1, 2027. The move marks the end of nearly ...