Latest Microsoft news

Five years of reviews, 480 hours, 18 deep dives. FedRAMP reviewers called Microsoft's government cloud "a pile of shit" and reported "lack of confidence" in its encryption. They approved it anyway. ProPublica reveals how.

A zero-click XSS in Excel lets attackers instruct Copilot Agent to exfiltrate document contents to external servers. Microsoft patched CVE-2026-26144 on March 10, rating it Critical despite a CVSS 7.5 score.