Microsoft Incident Response – Detection and Response Team (DART) researchers uncovered a new backdoor that is notable for its novel use of the OpenAI Assistants Application Programming Interface (API) ...

Microsoft security researchers have discovered a new backdoor malware that uses the OpenAI Assistants API as a covert command-and-control channel.

The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions in an attempted ...

Do you reckon that Windows 11's Update History page looks like a chaotic mess? Well, you're quite right - and Microsoft is aiming to tidy it up.

Microsoft has released the October 2025 update for Visual Studio 2022 (17.14). Read on to learn everything new in this update ...

Microsoft enhances the Researcher agent in M365 Copilot with 'Computer Use,' a feature that uses a secure VM to automate ...

Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense. The GlassWorm campaign that infected VS Code extensions in the Open VSX marketplace ...

Eclipse Foundation, which maintains the open-source Open VSX project, said it has taken steps to revoke a small number of ...

Microsoft's new MCP Server connects AI agents with Azure services via the Model Context Protocol, enabling automated cloud management.

Microsoft expanded model choice in VS Code with Bring Your Own Key (BYOK), enabling developers to connect models from any provider and manage them through a new extensible API.

Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.

GitHub unveiled Agent HQ at its Universe 2025 event, a new platform that lets developers orchestrate multiple AI agents ...