[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-XTYqsORj9WAtY_l09O-0BYnkvMqllwWD7etqKyxtfY":3},{"article":4,"iocs":52,"watch_terms":57,"solutions":58,"lesson":155},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"a9563683-fa88-49ea-8ff5-76a301cdff66","Microsoft Vulnerabilities Hit Record High, Critical Flaws Decline, Report Find","microsoft-vulnerabilities-hit-record-high-critical-flaws-decline-report-find-cbd878","Microsoft vulnerabilities hit a record high while critical flaws decline, BeyondTrust report reveals rising risks across Windows, Office, and Azure systems.","BeyondTrust's 2026 Microsoft Vulnerabilities Report reveals a troubling shift: while total vulnerabilities fell to 1,273 (down 6%), critical flaws doubled, with Office vulnerabilities tripling and Azure critical bugs surging ninefold. The report warns that attackers are targeting fewer but far more dangerous bugs, especially privilege escalation vectors and non-human identities (automated service accounts) that lack MFA protection.","Microsoft vulnerabilities drop 6% but critical flaws double, driven by Office and Azure risks.","https:\u002F\u002Fhackread.com\u002Fmicrosoft-vulnerabilities-hit-record-high-report\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F04\u002Fmicrosoft-vulnerabilities-hit-record-high-report.png","2026-04-21T17:31:30+00:00","2026-04-21T18:00:17.689421+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"Microsoft Office","product",{"name":24,"type":22},"Azure",{"name":26,"type":22},"Windows Server",{"name":28,"type":22},"Azure Entra ID",{"name":30,"type":22},"Dynamics 365","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[53],{"type":54,"value":55,"context":56},"cve","CVE-2025-55241","Critical Azure Entra ID impersonation flaw allowing threat actors to impersonate Global Administrator and bypass enterprise cloud trust boundaries.",[18,21,24],{"controls":59,"vendors":145},[60,88,116],{"slug":61,"name":62,"problem":63,"products":64},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[65,72,80],{"vendor_slug":66,"vendor_name":18,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":89,"name":90,"problem":91,"products":92},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[93,101,108],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":89,"product_name":105,"url":106,"description":107},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"slug":117,"name":118,"problem":119,"products":120},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",[146,152],{"slug":147,"name":148,"logo_path":149,"roles":150},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png",[151],"reported_by",{"slug":66,"name":18,"logo_path":67,"roles":153},[154],"affected",{"slug":156,"title":157,"body":158,"framework_refs":159,"framework_notes":166},"critical-microsoft-vulnerabilities-double-despite-overall-decline","Critical Microsoft Vulnerabilities Double Despite Overall Decline","Microsoft's 2026 vulnerability landscape shows a dangerous trend where attackers are focusing on fewer but more severe flaws, particularly in Office and Azure environments. The doubling of critical vulnerabilities, especially privilege escalation bugs, demonstrates that threat actors are becoming more strategic in targeting high-impact vulnerabilities. The surge in Azure critical flaws and tripling of Office vulnerabilities highlights the growing attack surface of cloud and productivity platforms. Most concerning is the targeting of non-human identities like service accounts that typically lack multi-factor authentication, creating privileged access pathways for attackers.",[160,161,162,163,164,165],"CIS Control 7","NIST SI-2","NIST IA-2","CIS Control 5","NIST AC-2","ISO 27001 A.12.6.1",{}]