Microsoft has patched a critical Copilot Enterprise flaw that gave researchers root access but controversially rated it ...

Microsoft's AI web project NLWeb had an embarrassing security flaw that could allow attackers to steal sensitive files.

A critical security flaw in Microsoft's new NLWeb protocol raises questions about its 'agentic web' strategy, despite a quick ...

The researchers at Aim Security dubbed the flaw “EchoLeak.” Microsoft told Fortune that it has already fixed the issue in Microsoft 365 Copilot and that its customers were unaffected.

Microsoft will offer up to $5 million in bounty awards at this year's Zero Day Quest hacking contest, which the company ...

The bug, tracked as CVE-2025-31199, could allow hackers to access files in the Downloads folder, as well as caches utilized ...

Microsoft has expanded its .NET bug bounty program and increased rewards to $40,000 for some .NET and ASP.NET Core ...

Microsoft declined to comment on the GPT-5 references in Copilot, and the company isn’t commenting on its new smart mode, ...

Research demonstrating high-impact cloud and AI security flaws will be rewarded at Microsoft’s Zero Day Quest competition in ...

Microsoft 365 Copilot, the AI tool built into Microsoft Office workplace applications including Word, Excel, Outlook, PowerPoint, and Teams, harbored a critical security flaw that, according to ...