Incident Response
The latest Incident Response coverage — news, analysis, and updates from the WindowsNews.AI desk.
Hyper-V PowerShell Direct Flaw Lets Attackers Impersonate Admins, Microsoft Urges Patching
Microsoft has disclosed a new elevation-of-privilege vulnerability (CVE-2025-49734) in Windows Hyper-V’s PowerShell Direct feature that lets a locally authenticated attacker with low privileges...
Microsoft Patches CVE-2025-53798: RRAS Memory Leak Exposes VPN Gateways to Data Theft
Microsoft has released a vendor update to patch CVE-2025-53798, an information-disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS) that allows an attacker to read...
Windows RRAS Out-of-Bounds Read Flaw Exposes Memory to Remote Attackers
Microsoft has confirmed a memory disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS) that could allow unauthenticated attackers to extract sensitive information from...
Critical RRAS Memory Leak CVE-2025-53797 Puts VPN Gateways at Risk – Patch Immediately
Microsoft has disclosed a high-severity information-disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS) that could allow unauthenticated attackers to read sensitive...
Rockwell Patches Critical SSRF Flaw in ThinManager That Exposes NTLM Hashes to Attackers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reissued a high-severity advisory on September 9, 2025, for a server-side request forgery (SSRF) vulnerability in Rockwell...
CISA Flags Rockwell CompactLogix 5480 Flaw That Lets Attackers Run Code Via Physical Access
Three words can make any plant manager’s blood run cold: arbitrary code execution. That’s what CISA is warning about with a newly republished advisory for the Rockwell Automation CompactLogix...
ABB Patches Critical Authentication Bypass in ASPECT, NEXUS, and MATRIX BMS
{ "title": "ABB Patches Critical Authentication Bypass in ASPECT, NEXUS, and MATRIX BMS", "content": "ABB has rushed out firmware updates for its ASPECT, NEXUS, and MATRIX building management...
Microsoft Copilot Outage Strikes on September 8, Leaving Users Scrambling for Workarounds
On Monday evening, September 8, 2025, Microsoft’s Copilot AI assistant became inaccessible for a wave of users, triggering a spike in outage reports across community forums and monitoring services....
Copilot Studio Now Intercepts Agent Actions for Real-Time Security Vetoes
Microsoft has shifted the security model for its Copilot Studio from passive guardrails to active, inline enforcement. Organizations can now route an AI agent’s planned actions—including prompts,...
Copilot Studio Now Lets Security Teams Block Agent Actions in Under One Second
Microsoft has handed enterprise defenders a powerful new capability: the ability to inspect and veto every planned action of an autonomous AI agent before execution, all within a single second....
Copilot Studio's New Runtime Security Lets Enterprises Veto AI Agent Actions Instantly
Microsoft is giving enterprise security teams a new way to block dangerous AI agent actions in near real time. A public preview feature in Copilot Studio, announced March 2025, lets organizations...
Red Sea Cable Damage Triggers Azure Latency Surge, Microsoft Reroutes Traffic
Microsoft has confirmed that multiple undersea fiber-optic cables in the Red Sea were severed, triggering a surge in latency for Azure customers as traffic is forced onto longer alternative paths....