Insights
Security news, Microsoft and Azure updates, and practical guides on cloud infrastructure, custom applications and data, from the Alcaeus Services team.
Filtered by category: Microsoft Clear filter
A major Windows update problem has emerged following Microsoft's September 8, 2026 security updates, with system administrators reporting serious failures affecting Remote Desktop Services (RDS).
A new data-extortion group known as ExfilSquad is claiming responsibility for a large campaign involving data allegedly pulled from misconfigured public-facing Microsoft Power Pages portals connected to Microsoft Dataverse and Dynamics 365…
Device code phishing and voice phishing are becoming two of the fastest-moving identity attack trends of 2026.
Microsoft has addressed a serious Azure Automation security issue that could have allowed attackers to cross tenant boundaries and assume another organization’s automation identity. The issue, tracked as CVE-2025-29827, was assigned a…
Microsoft has released its largest Patch Tuesday update on record, addressing 622 CVEs across its product portfolio.
A new proof-of-concept exploit called LegacyHive has been released by security researcher Chaotic Eclipse, also known as Nightmare-Eclipse.
Cybersecurity researchers have identified a growing cloud attack technique known as OAuth client ID spoofing, which allows threat actors to probe Microsoft Entra ID environments while slipping past common sign-in telemetry.
Attackers whose methods overlap with the data-extortion group ShinyHunters have spent the past year targeting corporate Salesforce environments without exploiting a vulnerability in Salesforce itself.
Google and Microsoft have removed ModHeader, a popular browser extension used to edit HTTP headers, after researchers found a hidden browsing-history collection system inside the official store version.
Microsoft has removed 119 malicious extensions from the Edge Add-ons store after uncovering a long-running operation it calls StegoAd.
A variant of the infamous Shai-Hulud worm has disrupted Microsoft’s GitHub repositories, breaking CI/CD workflows and raising fresh concerns about the speed and reach of modern software supply chain attacks.
Microsoft’s June 2026 Patch Tuesday update is one of the clearest signs yet that vulnerability management is entering a new era.
