MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

Researchers have discovered a vulnerability in the remote procedure calls (RPC) for the Windows Server service, which could allow an attacker to gain control over the domain controller (DC) in a ...

CVE-2026-62911 Exchange Server flaw lets attackers seize all mailboxes with no password: nearly 22,000 servers remain unpatched worldwide three weeks after Microsoft's August fix shipped, 85 percent ...

Facepalm: Microsoft reportedly locked down a server leaking company files and employee data. In what could be described as a "rookie mistake," the Azure server was left wide open to the internet ...

Security once focused on defensive measures at the perimeter, but Windows Defender Credential Guard plugs gaps inside the data center to thwart attacks launched from the network. Once a malicious ...

I also see TONS of Schannel warnings (event I 36886) - No suitable default server credential exists on this system. This will prevent server applications that expect to make use of the system default ...