Cybersecurity
The latest Cybersecurity coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows 10 End of Support: Germany's PC Users Face October 2025 Deadline Without Security Updates
On October 14, 2025, Microsoft will permanently turn off the security update tap for Windows 10. For millions of German PCs still running the decade-old operating system, that cutoff is not a distant...
Microsoft Sued Over Windows 10 End-of-Support, Accused of Pushing Users to AI PCs and Paid Updates
A California resident has filed a lawsuit against Microsoft, alleging the company's imminent termination of free Windows 10 security updates deliberately endangers user data and coerces millions into...
How to Get Free Windows 10 Security Updates After the 2025 Deadline
Consumers can keep their Windows 10 machines safe after October 14, 2025, for free—if they act before the deadline. Microsoft is preparing an unprecedented offer of Extended Security Updates at no...
Windows Hello Biometric Bypass: Researchers Swap Faces to Hijack PCs—Here’s How ESS Stops It
Two German researchers standing on the Black Hat stage just demonstrated how an attacker with local admin rights can swap their own facial biometrics into a stolen laptop’s Windows Hello...
Microsoft Sued Over Windows 10 Sunset in ‘Forced Obsolescence’ AI Monopolization Claim
A California man has filed a lawsuit aiming to block Microsoft from ending free support for Windows 10, arguing the October 14, 2025 cutoff is a ploy to force users onto AI‑ready hardware and...
Microsoft Patches CVE-2025-53787: BizChat Flaw Exposes Enterprise AI Chat Data
Microsoft has confirmed a new vulnerability, CVE-2025-53787, that allows potential information disclosure through the BizChat feature of Microsoft 365 Copilot, sparking urgent patch deployment across...
Zero-Click Data Leak in Microsoft 365 Copilot BizChat Exposes Enterprise Secrets
A newly disclosed vulnerability in Microsoft 365 Copilot BizChat can expose sensitive business information without any user interaction, Microsoft warned in a security advisory published this week....
Microsoft Confirms Critical Azure OpenAI Privilege Escalation Flaw, Urges Vigilance Until Patch
{ "title": "Microsoft Confirms Critical Azure OpenAI Privilege Escalation Flaw, Urges Vigilance Until Patch", "content": "Microsoft has officially acknowledged a critical security vulnerability...
CVE-2025-53792: Azure Portal Privilege Escalation Bug Could Lead to Full Cloud Control
Microsoft has released a security update for CVE-2025-53792, a critical elevation-of-privilege vulnerability in the Azure Portal that allows authenticated attackers to bypass role-based access...
CVE-2025-8579: Google Patches Critical Gemini Live Flaw—Edge Users Must Update Too
CVE-2025-8579, a critical security flaw in Google Chrome's Gemini Live feature, has been patched after four months of quiet danger. The vulnerability, reported by researcher Alesandro Ortiz on April...
Chrome and Edge Users Alerted to Critical PiP Flaw CVE-2025-8577 as Patches Roll Out
A serious security vulnerability in the Chromium engine’s Picture-in-Picture (PiP) feature is being urgently patched by Google and Microsoft, affecting millions of users of Chrome, Edge, and other...
Chrome 139 Patches UI Spoofing Flaw That Tricks Users Into Giving Away Permissions—Edge Users Are Protected Too
Google has shipped a critical security fix for Chrome that plugs a user interface spoofing hole attackers could use to trick people into giving websites access to their camera, microphone, or...