Latest Microsoft Security Updates: Major Breaches, AI Threats & New Copilot Features

May 2025 has seen a flurry of significant developments in the cybersecurity landscape, impacting both Microsoft’s services and the broader tech world. Recent reports highlight successful breaches of major IT firms, sophisticated phishing techniques leveraging trusted platforms, and the ongoing evolution of AI-related threats. Simultaneously, Microsoft continues to enhance its AI offerings, including Copilot, while also emphasizing proactive security measures and improvements to address emerging vulnerabilities. This report summarizes these key developments and their implications.

Key Developments & Updates for Microsoft Updates

Major Security Breaches and Vulnerabilities

ConnectWise, a prominent IT management software company, experienced a suspected state-sponsored cyberattack impacting some ScreenConnect customers. (Source: BleepingComputer)
Threat actors are employing Google Apps Script to create evasive phishing attacks, making malicious links appear legitimate and bypassing security tools. (Source: BleepingComputer)
A vulnerability in Apple Safari allows for fullscreen browser-in-the-middle (BitM) attacks, enabling threat actors to steal user credentials. (Source: BleepingComputer) While not directly a Microsoft issue, this highlights the importance of comprehensive security across all platforms.
The U.S. Treasury Department sanctioned Funnull Technology, a Philippines-based company linked to hundreds of thousands of malicious websites involved in cyber scams resulting in over $200 million in losses for Americans. (Source: BleepingComputer)
Cybercriminals are exploiting the hype surrounding AI to spread ransomware and malware, using AI-related lures to trick victims. (Source: BleepingComputer)
Microsoft’s Threat Intelligence team discovered Void Blizzard, a Russia-affiliated threat actor targeting critical sectors (government, defense, etc.) for espionage. (Source: Microsoft Security Blog)
Microsoft has detailed the Lumma Stealer, a sophisticated info-stealing malware, and its disruption. (Source: Microsoft Security Blog)
Microsoft is actively working on defending against evolving identity attack techniques, emphasizing the ongoing need for robust security measures like passkeys. (Source: Microsoft Security Blog)

Copilot and AI Developments

Microsoft announced significant updates to its Copilot (AI) Bounty Program, incentivizing broader participation and enhancing security. (Source: Microsoft Security Response Center)
Microsoft 365 Copilot Tuning, a new low-code capability, allows organizations to tune AI models using their own data, facilitating improved workflows. (Source: Microsoft 365 Blog)
Microsoft Build 2025 showcased new Copilot Studio features, including multi-agent orchestration and expanded developer tools. (Source: Microsoft 365 Blog)
Microsoft is supporting the open Agent2Agent (A2A) protocol for improved multi-agent application interoperability. (Source: Microsoft 365 Blog)
A free three-month trial of Microsoft 365 Personal (including Copilot) is now available for US college students. (Source: Microsoft 365 Blog)
Microsoft shared insights on a simple jailbreak method (Context Compliance Attack or CCA) to increase awareness and encourage better safeguards in AI system design. (Source: Microsoft Security Response Center – note: this post contains sensitive topics and a content warning is advised).
Microsoft highlighted the successful completion of the Zero Day Quest 2025, awarding $1.6 million for vulnerability research focused on Copilot and cloud security. (Source: Microsoft Security Response Center)
Microsoft published guidance on how to safely and efficiently deploy AI within organizations. (Source: Microsoft Security Blog)

Windows Updates and Known Issues

Microsoft provides details on known issues and notifications for Windows 11, version 23H2. (Source: Microsoft Learn)
Information on getting started with Windows Local Administrator Password Solution (LAPS) and Active Directory is available. (Source: Microsoft Learn)
Resources for Windows development using WinUI and the Windows App SDK are provided. (Source: Microsoft Learn)
Information on what’s new in the Windows ADK and ADK tools is available. (Source: Microsoft Learn)
Details about the Surface devices driver and firmware lifecycle for Windows-based devices is provided. (Source: Microsoft Learn)

Sources Consulted

This article was synthesized using information from…

Note: While efforts are made to accurately represent information, this is a summary and may not encompass every detail. Always refer to the original sources for complete information.