Microsoft Security Blog microsoft.com

Microsoft Agent 365, now generally available, expands capabilities and integrations

microsoft.com·2w

What’s new, updated, or recently released in Microsoft Security

microsoft.com·2w

Email threat landscape: Q1 2026 trends and insights

microsoft.com·3w

8 best practices for CISOs conducting risk reviews

microsoft.com·3w

Simplifying AWS defense with Microsoft Sentinel UEBA

microsoft.com·3w

AI-powered defense for an AI-accelerated threat landscape

microsoft.com·4w

Detection strategies across cloud and identities against infiltrating IT workers

microsoft.com·4w

Making opportunistic cyberattacks harder by design

microsoft.com·4w

Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

microsoft.com·4w

Containing a domain compromise: How predictive shielding shut down lateral movement

microsoft.com·4w

Building your cryptographic inventory: A customer strategy for cryptographic posture management

microsoft.com·4w

Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise

microsoft.com·5w

Incident response for AI: Same fire, different fuel

microsoft.com·5w

The agentic SOC—Rethinking SecOps for the next decade

microsoft.com·5w

Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

microsoft.com·6w

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

microsoft.com·6w

SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

microsoft.com·6w·Hacker News

Inside an AI‑enabled device code phishing campaign

microsoft.com·6w·Hacker News, r/sysadmin

Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

microsoft.com·6w

Threat actor abuse of AI accelerates from tool to cyberattack surface

microsoft.com·6w

Log in to enable infinite scrolling