Microsoft

Latest news, models and how they changed.

Latest news

CERT-EU warns of actively exploited critical SharePoint RCE flaws

CERT-EU has updated its advisory on critical vulnerabilities in Microsoft SharePoint Server, confirming active exploitation of CVE-2026-50522 (CVSS 9.8), a deserialisation flaw allowing remote code execution. This is part of a wider series of recently patched critical bugs — CVE-2026-32201, CVE-2026-45659, CVE-2026-56164 and CVE-2026-58644 — affecting on-premise SharePoint Server instances, some exploitable without authentication.

7 hours agoCERT-EU

BreakingCyber Security

Microsoft tracks active exploitation of unauthenticated Zimbra mail server vulnerability (CVE-2026-73570)

Microsoft Threat Intelligence documented exploitation of CVE-2026-73570, an unauthenticated OS command-injection flaw in the Zimbra Collaboration Suite's SNMP notification path. Attackers triggered it via specially crafted emails against internet-facing servers running the optional zimbra-snmp package with SNMP notifications enabled, requiring no authentication or user interaction. Post-exploitation activity included JSP webshell deployment, privilege escalation to root, persistent access, credential and mailbox theft, lateral movement across Zimbra clusters, and custom remote-access malware. Zimbra fixed the issue in version 10.1.20 (released July 20, 2026); the CVE was publicly disclosed August 13, 2026, and Microsoft observed scanning and exploitation activity during the gap between patch availability and disclosure, as well as after.

3 days agoMicrosoft Security

Research

Microsoft Research launches Quine, an AI world model built for biological discovery

Microsoft Research has unveiled Quine, a research system combining a multimodal 'world model' of biology with an interactive harness linking AI models, scientific literature, lab tools, and researchers. Built jointly across data types such as genomics, proteins, chemistry, RNA/cell state, and bioimaging, the model aims to predict how biological systems respond to interventions before costly lab experiments are run. Working with the Broad Institute of MIT and Harvard, Microsoft used Quine to rank thousands of compounds for their potential to shift pancreatic cancer cells between therapeutic states, and the top-ranked candidates were validated in wet-lab assays within a single weekend. Microsoft is now opening a 'Quine Fellows' program to give selected scientists early access, while cautioning that the system is experimental, research-only, and not intended for clinical use.

4 days agoMicrosoft Research