Microsoft

Strengthen identity and access controls

Learn about Authenticator-specific requirements, configuration, and troubleshooting for passkeys in Microsoft Authenticator for Microsoft Entra ID.

Azure maintient la dynamique la plus forte

Microsoft conserve la croissance cloud la plus élevée parmi les grands hyperscalers. Azure affiche une progression de 43 % sur un an tandis que l’ensemble de l’activité Microsoft Cloud atteint 59,3 milliards $ de chiffre d’affaires trimestriel, en hausse de 27 %. Le groupe attribue cette performance à la diffusion croissante de ses offres d’IA, notamment Azure AI et Microsoft 365 Copilot. Microsoft indique désormais compter plus de 30 millions d’utilisateurs payants de Microsoft 365 Copilot. Aut

This image is double-silly because it features the FUCKING PIECE OF SHIT COPY-MENU WINDOWS 11 WON...

t.me31 juil.

Protect sensitive data in motion across software as a service (SaaS) and AI apps with Microsoft P...

Stop sensitive data from leaving your organization. Extend data detection and identity-aware enforcement to the network—now in preview.

Microsoft Purview strengthens data security, compliance, and investigation for AI

Learn how Microsoft Purview DLP protects Microsoft 365 Copilot and Copilot Chat by blocking sensitive prompts, restricting web search, and excluding labeled content.

Yesterday Håkon Måløy, a stinky AI security researcher, unveiled several vulnerabilities with Mic...

dr-ish is that if you insert carefully worded instructions, as white-text thus making it invisible to the user, at the end of Microsoft Office documents, Microsoft Copilot will follow the instructions given to it. The problem with this method (as is tradition), is that the text is still visible in the document if highlighted by the user. Hence, doing something as simple as CTRL+A would render the text visible to the user. Regardless, Håkon Måløy successfully appended white text to a Microsoft Office document that halved the values of company data presented in the document. In simple words, the appended white text manipulated company data in the Microsoft Word file. His second proof-of-concept demonstrated appended white texting propagating the appended white text to other Microsoft Office documents, thus making…

t.me30 juil.

Which Microsoft Sentinel rule types can be migrated automatically?

Automatic Migration reduces the time and expertise needed to migrate to a new SIEM. The first version of this feature maps and translates existing SIEM artifacts with AI, reducing cost, complexity, an...

How to migrate Microsoft Sentinel detection rules to Elastic

Use Automatic Import with an LLM to build a custom Elastic integration from a data sample when no prebuilt integration exists, for Security, Observability, and other solutions.

That’s Not How Kerberos Works…

A while back, I read an interesting blog by Oddvar Moe about Pre-created computer accounts in Active Directory. In the blog, Oddvar also describes the option to configure who can join the computer to the domain after the object is created. This sets an interesting ACL on computer accounts, allowing the principal who gets those rights to reset the computer account password via the “All extended rights” option. That sounded quite interesting, so I did some more digging into this and found there are more ACLs set when you use this option, which not only allows this principal to reset the password but also to configure Resource-Based Constrained Delegation. BloodHound was missing this ACL, and I dug into why, which I’ve written up in this short blog. If an environment is sufficiently large (and/or old), someone at some point likely added a few systems to the domain with this option set to “Everyone” or “Authenticated Users”, allowing all users in the domain to join the computer to the domain. Whoever configured this probably did not realize this would also give everyone specific permissions on the object after it is joined to the domain. The logic to analyze this is now included in the BloodHound.py data gatherer, as well as a Pull Request for SharpHound. If this misconfiguration is present in a domain, it may give you access to servers from any user. This makes for an easy first step in lateral movement. Along the way, I discovered more cases in which these ACEs were present, so in any larger environment, there’s a good chance that unintended users have some lingering permissions on computer objects. This post includes some queries to use in BloodHound, as well as some recommended mitigations.

Why Did the Tools Fail?

Understand Cluster Shared Volumes (CSV) in Windows Server failover clusters, including features, requirements, and best practices for deployment and management.

Own the Node, Own the Cluster

POC tool to abuse windows server failover clusters - garrettfoster13/fustercluck

Bring Google AI directly to your AWS and Azure data

Historically, running advanced analytics or training ML models across clouds meant a cross-cloud tax: high egress fees, network latency, and fragile ETL pipelines. The borderless Lakehouse solves this with Cross-Cloud Interconnects. These private, dedicated links deliver consistent bandwidth and lower latency than the public internet, at a fraction of the cost of traditional cross-cloud connections. The borderless Lakehouse supports zero variable egress costs when accessing your data from AWS1.

Mustafa Suleyman, CEO, Microsoft AI

CEO, @MicrosoftAI | Author: The Coming Wave | Past: Co-founder, @InflectionAI & @GoogleDeepMind

Windows guests (experimental)

Scripts for packaging virtio-win drivers. Contribute to virtio-win/virtio-win-pkg-scripts development by creating an account on GitHub.

What’s next for Windows guests

Learn about the Microsoft implementation of the Server Message Block (SMB) Protocol.

Microsoft affirme battre tout le monde en détection de failles avec MAI-Cyber-1-Flash

Un parapluie, mais pas de baskets Microsoft AI a présenté le 27 juillet 2026 son premier modèle dédié à la cybersécurité. Intégré dans son architecture, l’entreprise annonce battre tous les modèles actuels dans ce domaine, y compris Mythos d’Anthropic, mais attention à ce qui est réellement compa...

next.ink28 juil.

Microsoft dévoile Project Perception, sa propre armée d’agents IA pour la cybersécurité

Microsoft a présenté le 27 juillet 2026 une architecture de sécurité entièrement bâtie sur l'IA agentique, avec une préversion publique annoncée pour le 3 août 2026. La cybersécurité est devenue l'un des terrains de bataille les plus visibles de la course à l'IA, et chaque acteur y va désormais de son programme

numerama.com28 juil.

Activate your Defender's Advantage today

Gain insights on today’s hot cyber defense topics observed on the frontlines by Mandiant and the Google Threat Intelligence Group.

Start exploring the Copilot app

The GitHub Copilot app is the only desktop experience for agent-driven development built natively on GitHub for macOS, Windows, and Linux.

Microsoft testing ad-supported cloud gaming

Microsoft is testing a free (albeit ad-supported) cloud-gaming model for Xbox games. Starting today, gamers who signed up for Microsoft's Xbox Insider Program will be able to play games from their library that are cloud-compatible, without paying for a Game Pass Ultimate subscription. They will, however, have to watch ads at the beginning of the session. Microsoft is currently capping playtime at one hour per session; use up your time and you'll have to watch more ads. There's no word yet on how

How to help test Microsoft's ad-supported cloud gaming

If you have an Xbox, here's how to check out some ad-supported cloud gaming. Download the Xbox Insider Hub app on Xbox Series X|S, Xbox One, or Windows PC.Enroll in the Xbox Insider Program. It's free. That's it! Now you can stream select cloud-compatible games you own (after you check out some commercials, of course.)

Forget 90 day patch windows

Manage, update, and secure all your devices like it's 2026

Circadian windows are easier to read

When is the best time in the morning to have some caffeine? If you never thought about it much, you probably drink your coffee as soon as you can. On the other hand, if you’re always looking for ways to optimize your life (maybe we’d even say hack it), you may have heard the advice to wait until mid-morning. Good news: you can ditch this supposed hack. There’s no need to delay your morning caffeine. Drink it when you want it.

Current release and future outlook

Contribute to llm-d-incubation/llm-d-rl-time-slicing development by creating an account on GitHub.