A practical checklist for the Azure DevOps MCP flaw that lets hidden PR comments hijack AI coding agents, plus the ...

A critical Azure Automation bug lets an attacker with a valid account hijack identities and access other tenants' data, ...

An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a two-week period. The threat actor tried to authenticate via Microsoft ...

Running containers on Windows has never been as easy as it should be. While there are versions of Docker Desktop and Podman ...

A hidden Azure DevOps PR comment can steer a reviewer’s AI agent into other projects and expose source code, secrets, and work items.

If you can't beat them, join them.

Software development AI has evolved far beyond code completion. Writing functions or suggesting syntax is no longer the ...

Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack" aimed at Microsoft's Azure command-line interface (CLI), compromising dozens of accounts in the process. ...

A password-spraying attack successfully breached Microsoft 365 accounts The hackers abused improperly configured conditional access policies to bypass MFA Many organizations targeted had no MFA ...

GitHub is layering spending limits, expanded credit allowances and increasingly granular usage reporting onto Copilot, while Microsoft is reworking Visual Studio and VS Code to expose -- and reduce -- ...

TD SYNNEX appoints Chris Fabes as President of Canada, Huntress warns of massive Azure CLI password spray attacks targeting non-human identities, and MSSPs face an employee retention problem ...

As organizations scale AI and agents across environments, security teams need protection that covers every surface. The Microsoft vision is simple: security should be ambient and autonomous, just like ...