Microsoft has confirmed that a hacker who successfully exploits a zero-day SQL vulnerability could gain system administrator privileges. Here’s how to fix it.

Zero-days in .NET and SQL Server, and a handful of critical RCE bugs, form the nucleus of Microsoft's March Patch Tuesday update.

Today is Microsoft's March 2026 Patch Tuesday with security updates for 79 flaws, including 2 publicly disclosed zero-day ...

Employees detailed to the Social Security Administration shared sensitive data through a nonsecure server, the Justice Department disclosed. By Eileen Sullivan Reporting from Washington Employees with ...

Security defenders are girding themselves in response to the disclosure of a maximum-severity vulnerability disclosed Wednesday in React Server, an open-source package that’s widely used by websites ...

With the official release of Microsoft's latest database offering, let's see what was improved and what still needs some work. Today, at Ignite, Microsoft announced the general availability of SQL ...

Three out of the five Five Eyes states – Australia, Canada and the US – have issued guidance to help end-user organisations secure their Microsoft Exchange Server instances, stemming in part from an ...

Microsoft issues emergency patch for a critical WSUS flaw enabling remote code execution CVE-2025-59287 allows unauthenticated attackers to gain SYSTEM privileges without user interaction An ...

This month’s collection of fixes from Microsoft includes 86 patches — but at least there were no zero-day bugs. Microsoft released 86 patches this week with updates for Office, Windows, and SQL Server ...

The Social Security Administration’s chief data officer, Charles Borges, resigned Friday, just three days after alleging that members of the Department of Government Efficiency (DOGE) uploaded the ...

WASHINGTON ― Personal information of more than 300 million Americans is at risk of being leaked or hacked after employees of the Department of Government Efficiency uploaded a sensitive Social ...