Microsoft Security Blog

Email threat landscape: Q1 2026 trends and insights

Microsoft20w20 weeks agoCovered by420 min read

Covered by4 sites

phpfreelance.co.uk, mailfloss.com, and more ›

8 best practices for CISOs conducting risk reviews

Microsoft20w20 weeks ago10 min read

Simplifying AWS defense with Microsoft Sentinel UEBA

Microsoft21w21 weeks ago15 min read

AI-powered defense for an AI-accelerated threat landscape

Microsoft21w21 weeks agoCovered by45 min read

Covered by4 sites

Schneier on Security, DEV Community, and more ›

Detection strategies across cloud and identities against infiltrating IT workers

Microsoft22w22 weeks agoCovered by210 min read

Covered by2 sites

The Hacker News, The Cybersecurity Pulse (TCP) ›

Making opportunistic cyberattacks harder by design

Microsoft22w22 weeks ago7 min read

Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

Microsoft22w22 weeks agoCovered by320 min read

Covered by3 sites

hackread.com, Petri IT Knowledgebase, and more ›

Containing a domain compromise: How predictive shielding shut down lateral movement

Microsoft22w22 weeks ago10 min read

Building your cryptographic inventory: A customer strategy for cryptographic posture management

Microsoft22w22 weeks agoCovered by29 min read

Covered by2 sites

Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise

Microsoft22w22 weeks agoCovered by520 min read

Covered by5 sites

wiz.io, and more ›

Incident response for AI: Same fire, different fuel

Microsoft22w22 weeks ago6 min read

The agentic SOC—Rethinking SecOps for the next decade

Microsoft23w23 weeks ago

Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

Microsoft23w23 weeks ago

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

Microsoft23w23 weeks ago

SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

Microsoft24w24 weeks agoHN Covered by4

Covered by4 sites

malware.news, and more ›

Inside an AI‑enabled device code phishing campaign

Microsoft24w24 weeks agoHN Covered by13

Covered by13 sites

Anthropic, CyberScoop, and more ›

Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

Microsoft24w24 weeks agoCovered by9

Covered by9 sites

CyberScoop, bankinfosecurity.com, and more ›

Threat actor abuse of AI accelerates from tool to cyberattack surface

Microsoft24w24 weeks agoCovered by2

Covered by2 sites

BleepingComputer, and more ›

Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments

Microsoft24w24 weeks ago