US Edition
Critical Microsoft Excel bug weaponizes Copilot Agent
- On Tuesday, Microsoft issued its March 2026 Patch Tuesday, addressing 83 vulnerabilities including the critical Microsoft Excel flaw CVE-2026-26144.
- The March release arrived amid a relative lull, with no actively exploited zero-day vulnerabilities and six defects Microsoft described as more likely to be exploited.
- Security researchers flagged two Office remote-code-execution bugs, CVE-2026-26110 and CVE-2026-26113, which can run arbitrary code via the Preview Pane.
- Administrators should restrict outbound Office traffic, monitor Excel network requests, and disable Copilot Agent until patched, as Action1 CEO and co-founder Alex Vovk told The Register, 'Information disclosure vulnerabilities are especially dangerous in corporate environments where Excel files often contain financial data, intellectual property, or operational records.'
- Security commentators noted the AI-attack component in the vulnerability is likely to become more common, with more than half of this month's defects capable of privilege escalation, reflecting broader risks.
16 Articles
16 Articles
Critical Microsoft Excel bug weaponizes Copilot Agent
Could steal sensitive personal and financial data After a whopper of a Patch Tuesday last month, with six Microsoft flaws exploited as zero-days, March didn't exactly roar in like a lion. Just two of the 83 Microsoft CVEs released on Tuesday are listed as publicly known, and none is under active exploitation, which we're sure is a welcome change to sysadmins.…
Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero-days
Microsoft addressed 83 vulnerabilities that cut across its broad portfolio of enterprise software and underlying services in its latest security update. The company’s Patch Tuesday release contained no actively exploited zero-day vulnerabilities and six defects it described as more likely to be exploited. The vendor’s batch of patches marks the first monthly update without an actively exploited zero-day in six months. The “lack of bugs under ac…
Windows, Office and several Microsoft services receive their batch of patches for the month of March. This batch includes two already known faults, as well as a long series of vulnerabilities affecting key components of the system.
Microsoft has released new updates for Windows 10 and Windows 11 to solve a number of errors and vulnerabilities, including two 'zero day' bugs. ...
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
