Microsoft Security Blog

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

Microsoft6w6 weeks agoCovered by915 min read

macOS ClickFix Lures Deploy AppleScript Stealer & Persistent RAT

Covered by9 sites

malware.news, The Hacker News, and more ›

Covers 1 story

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

Microsoft7w7 weeks agoHN Covered by1210 min read

Covered by12 sites

LeadDev, SecurityWeek, and more ›

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Microsoft7w7 weeks agoCovered by57 min read

Covered by5 sites

malware.news, 4sysops, and more ›

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

Microsoft7w7 weeks agoCovered by67 min read

Covered by6 sites

malware.news, 4sysops, and more ›

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Microsoft7w7 weeks agoHN Covered by4520 min read

DNS Poisoning Tactics Expand to Hospitality Wi-Fi

Covered by45 sites

Anthropic, The Decoder, and more ›

Covers 1 story

What’s new in Microsoft Security: July 2026

Microsoft7w7 weeks agoCovered by36 min read

Covered by3 sites

4sysops, Microsoft Tech Community, and more ›

Better security starts with better questions

Microsoft7w7 weeks ago4 min read

Rethinking security for the age of AI

Microsoft On the Issues8w8 weeks agoHN Covered by345 min read

Microsoft On the Issues

Covered by34 sites

Ars Technica, SecurityWeek, and more ›

Covers 1 story

MAI-Cyber 1

Enhancing AI security through global AI red teaming

Microsoft8w8 weeks agoCovered by55 min read

Covered by5 sites

The Register, 4sysops, and more ›

Email threat landscape: Q2 2026 trends and insights

Microsoft8w8 weeks agoCovered by820 min read

Covered by8 sites

This Week In 4n6, 4sysops, and more ›

Real world incident response: Microsoft and AXA XL strengthen cyber resilience

Microsoft8w8 weeks ago4 min read

Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks

Microsoft9w9 weeks agoCovered by39 min read

Covered by3 sites

malware.news, 4sysops, and more ›

ACR Stealer: Two observed intrusion chains amid increased threat activity

Microsoft9w9 weeks agoCovered by1410 min read

Intelligence Insights: May 2026, Possible ACR Stealer From Page Impersonating Claude

Covered by14 sites

BleepingComputer, malware.news, and more ›

Covers 2 stories

Least privilege for AI agents: Identity, access, and tool binding

Microsoft9w9 weeks agoCovered by66 min read

Covered by6 sites

DEV Community, malware.news, and more ›

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Microsoft9w9 weeks agoHN Covered by410 min read

Covered by4 sites

malware.news, GBHackers Security, and more ›

Turning threat intelligence into decisive action with Defender Experts

Microsoft9w9 weeks agoCovered by54 min read

Covered by5 sites

malware.news, 4sysops, and more ›

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft10w10 weeks agoCovered by1110 min read

An Update on the Recent Klue Security Incident

Covered by11 sites

TechRadar, malware.news, and more ›

Covers 1 story

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft10w10 weeks agoHN Covered by195 min read

Covered by19 sites

TechRadar, BleepingComputer, and more ›

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft10w10 weeks agoCovered by24 min read

Covered by2 sites

Microsoft Tech Community, and more ›