Join the Microsoft Security Response Center in London for our Researcher Celebration on Wednesday, December 10, from 4:30 – 9:00 PM.

You don’t have to be attending Black Hat Europe to participate. This event is open to all security researchers!

Apply now: microsoft.eventsair.com/msrcbh25/reg...

We're proud to highlight the outstanding work of Cato and the partnership with Microsoft that made this research possible. Together, we've strengthened security for everyone, showing how collaboration leads to real-world impact.

Part 2 of our 3-part XSS series is live! Discover how XSS can be weaponized when chained with other vulnerabilities, turning a simple flaw into a gateway for serious exploits like token theft and remote code execution: msft.it/6015trH8L

Security updates for November 2025 are now available! Details are here: msft.it/6018SZEg0

#PatchTuesday #SecurityUpdateGuide

During his BlueHat Asia opening remarks, Tom Gallagher, VP of Engineering, MSRC discussed how Asia is home to some of the world’s top security researchers, and we’re proud to recognize those who contribute to Microsoft products and services. We have over 40 MVRs past and present MVRs in attendance.

We hosted a pre-BlueHat Asia welcome reception this evening, giving our speakers, MSRC MVRs, and Microsoft team members a great opportunity to connect. A huge thank you to our presenters and MVRs for their role in making #BlueHatAsia a success!

At the Microsoft Security Response Center (MSRC), your feedback drives our innovation. Based on your input, we’ve introduced three new features designed to make your experience more efficient, transparent, and user-friendly.

Learn more in our blog post: www.microsoft.com/en-us/msrc/b...

Ever wondered how Windows decides if a file path is local, intranet, or Internet, and why it matters for security? MSRC security researchers dive deep into MapUrlToZone (MUTZ).

Learn more in our blog post: www.microsoft.com/en-us/msrc/b...

MSRC websites and services are experiencing downstream impact related to the ongoing Azure outage. Additional updates can be found on the Azure status page: azure.status.microsoft/en-us/status

Microsoft has addressed CVE-2025-55315, a vulnerability related to HTTP request handling. This update strengthens security and helps reduce risks such as privilege escalation or SSRF.

Learn more in our blog post: www.microsoft.com/en-us/msrc/b...

Microsoft is expanding transparency in vulnerability management. We are now publishing VEX (Vulnerability Exploitability eXchange) attestations for third-party CVEs associated with the Azure Linux Distribution (formerly CBL-Mariner).

Learn why VEX matters in our blog post: msft.it/6014shEmn

Congratulations to all the researchers recognized in this quarter’s MSRC 2025 Q3 Security Researcher Leaderboard! Thanks to all the researchers who partnered with us for your hard work and continued dedication to securing our customers.

Learn more in our blog post: www.microsoft.com/en-us/msrc/b...

Security updates for October 2025 are now available! Details are here: msft.it/6018SZEg0

#PatchTuesday #SecurityUpdateGuide