Information Security
The latest Information Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
How to Defend Against Calendar Phishing Scams in Microsoft 365
Microsoft 365 users are facing a sophisticated new threat that bypasses traditional email filters—calendar phishing scams. These attacks exploit the trusted nature of calendar invites, slipping...
CISA Adds Critical V8 JavaScript Engine Flaw to KEV Catalog: What You Need to Know
The Cybersecurity and Infrastructure Security Agency (CISA) has escalated warnings about CVE-2025-6554, a newly discovered type confusion vulnerability in Chrome's V8 JavaScript engine, by adding it...
Rise of Internally Spoofed Phishing: Abusing Microsoft 365's Direct Send Feature
Rise of Internally Spoofed Phishing: Abusing Microsoft 365's Direct Send Feature A sophisticated phishing campaign is exploiting a legitimate Microsoft 365 feature to bypass security protocols and...
Microsoft 365 Direct Send Exploit: How to Protect Your Business from Phishing Attacks
A sophisticated phishing campaign exploiting Microsoft 365's "Direct Send" feature has targeted over 70 organizations, primarily in the United States, highlighting critical vulnerabilities in...
Microsoft 365 Direct Send Exploit: How Phishers Bypass Email Security
A sophisticated phishing campaign exploiting Microsoft 365's Direct Send feature has security teams scrambling to update detection rules. This lesser-known SMTP protocol, designed for internal...
AI Models Mirror Chinese State Narratives, Sparking Global Disinformation Fears
Recent studies reveal that many AI models, including those developed outside China, inadvertently reflect Chinese state narratives and censorship ideals. This phenomenon raises critical questions...
YES24 Cyberattack Exposes Critical Ransomware Vulnerabilities in Global Digital Security
Four days of total digital silence. That was the stark reality for the 20 million users of YES24, South Korea’s largest online bookstore, after a catastrophic ransomware attack forced the entire...
US House Mandates WhatsApp Removal from All Official Devices Over High-Risk Rating
Congress Bans WhatsApp on Official Devices, Ushering in a New Era of Secure Government Communication Washington D.C. - In a significant move to bolster cybersecurity, the United States House of...
U.S. House Bans WhatsApp, Citing "High-Risk" Security Concerns
U.S. House Bans WhatsApp, Citing "High-Risk" Security Concerns Washington D.C. - The U.S. House of Representatives has prohibited congressional staff from using the popular messaging application...
House Bans WhatsApp on Government Devices: Security Risks & Secure Alternatives
The U.S. House of Representatives has officially banned WhatsApp on government-issued devices, citing significant security and privacy concerns. This decisive move highlights growing apprehensions...
16 Billion Login Credentials Exposed: How to Secure Your Accounts Now
In what cybersecurity experts are calling the largest credential leak in history, researchers have uncovered a staggering 16 billion login credentials exposed in a massive data breach. The leaked...
Microsoft’s Windows 365 Cloud PC Security Defaults: 2025 Guide for IT Pros
Microsoft's Windows 365 Cloud PCs are undergoing a significant security transformation in 2025, with new defaults designed to combat evolving cyber threats in hybrid work environments. These changes...