The latest Microsoft security advisories
- New Research Paper: Pre-hijacking Attacks on Web User Accounts
- Researcher Spotlight: Hector Peralta’s Evolution from Popcorn Server to the MSRC Leaderboards
- Anatomy of a Security Update
- Vulnerability mitigated in the third-party Data Connector used in Azure Synapse pipelines and Azure Data Factory (CVE-2022-29972)
- Azure Database for PostgreSQL Flexible Server Privilege Escalation and Remote Code Execution
- Congratulations and New Swag Awards for the Top MSRC 2022 Q1 Security Researchers!
- Expanding High Impact Scenario Awards for Microsoft Bug Bounty Programs
- Microsoft’s Response to CVE-2022-22965 Spring Framework
- Randomizing the KUSER_SHARED_DATA Structure on Windows
- On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program
- Increasing Representation of Women in Security Research
- Randomizing the KUSER_SHARED_DATA Structure on Windows
- Randomizing the KUSER_SHARED_DATA Structure on Windows
- Exploring a New Class of Kernel Exploit Primitive
- Guidance for CVE-2022-23278 spoofing in Microsoft Defender for Endpoint