Impersonating IT support: how threat actors turn a remote session into enterprise-wide access Microsoft Threat Intelligence has observed a human-operated intrusion campaign that abuses Micr... 2026-9-2 22:51:18 | 阅读: 44 | 收藏 | Microsoft Security Blog - www.microsoft.com microsoft remote loader malicious defender

Counterfeit installers to system compromise: Tracking a deceptive software download campaign Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit softwar... 2026-9-1 22:48:28 | 阅读: 66 | 收藏 | Microsoft Security Blog - www.microsoft.com microsoft defender payload windows stage

Cybersecurity IR Workshop: The workshop you shouldn’t miss Cybersecurity incidents can unfold in hours, but response plans often fail at the point of exec... 2026-9-1 18:55:35 | 阅读: 23 | 收藏 | Microsoft Security Blog - www.microsoft.com workshop dart microsoft processes

TerminalFix campaign deploys a reverse tunnel through multistage intrusion Microsoft Threat Intelligence has observed a TerminalFix campaign, a variant of ClickFix, targe... 2026-8-29 03:43:27 | 阅读: 51 | 收藏 | Microsoft Security Blog - www.microsoft.com microsoft powershell defender dui70 malicious

​​​​​​What’s new in Microsoft Security: August 2026 As organizations incorporate AI agents into more processes across business and operations, security... 2026-8-27 16:0:0 | 阅读: 38 | 收藏 | Microsoft Security Blog - www.microsoft.com microsoft security defender labeling drift

When AI infrastructure becomes the target: Securing gateways and control points AI is creating a new layer of enterprise infrastructure. Gateways, retrieval platforms, orchest... 2026-8-26 16:43:53 | 阅读: 41 | 收藏 | Microsoft Security Blog - www.microsoft.com litellm database microsoft ragflow

Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026 Security teams are overwhelmed with findings but still struggle to answer a simple question: which... 2026-8-19 17:30:0 | 阅读: 51 | 收藏 | Microsoft Security Blog - www.microsoft.com cloud security microsoft workload frost

Hunting MacSync Stealer infrastructure through behavioral pivots MacSync Stealer is a macOS-focused information stealer that relies on changing infrastructure t... 2026-8-18 17:8:28 | 阅读: 45 | 收藏 | Microsoft Security Blog - www.microsoft.com stealer macsync behavioral microsoft payload

Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise Security teams are being asked to defend a growing attack surface with fewer people and around the... 2026-8-10 16:0:0 | 阅读: 43 | 收藏 | Microsoft Security Blog - www.microsoft.com defender microsoft security mdr marketscape

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure Microsoft Threat Intelligence tracks DeadLock ransomware as an emerging financially motivated o... 2026-8-10 15:0:0 | 阅读: 53 | 收藏 | Microsoft Security Blog - www.microsoft.com encryption ransomware microsoft deadlock defender

​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP) As organizations adopt AI, they must secure both cloud and AI environments through a unified securi... 2026-8-5 16:30:0 | 阅读: 50 | 收藏 | Microsoft Security Blog - www.microsoft.com cloud security posture cnapp prioritize

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide Microsoft Threat Intelligence observed a macOS ClickFix campaign distributing infostealers, inc... 2026-8-5 15:48:39 | 阅读: 56 | 收藏 | Microsoft Security Blog - www.microsoft.com clickfix microsoft gate lure

ChainDrop supply chain compromise: Anatomy of a self-propagating worm Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more t... 2026-8-4 23:46:41 | 阅读: 86 | 收藏 | Microsoft Security Blog - www.microsoft.com microsoft github defender payload malicious

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps The calculus of cybersecurity has changed. AI is reshaping how organizations build, deploy, operate... 2026-8-4 18:30:0 | 阅读: 50 | 收藏 | Microsoft Security Blog - www.microsoft.com security microsoft workshop pillar development

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET Microsoft Defender’s attack disruption now includes device isolation, a new response action tha... 2026-8-4 17:54:4 | 阅读: 45 | 收藏 | Microsoft Security Blog - www.microsoft.com disruption attacker defender microsoft malicious

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft Since early May 2026, Microsoft Threat Intelligence has observed Storm-2945, a sub-cluster of M... 2026-7-31 21:1:37 | 阅读: 91 | 收藏 | Microsoft Security Blog - www.microsoft.com microsoft defender c2 security cornflake

​​​​What’s new in Microsoft Security: July 2026 Every organization needs security that protects end to end with the speed and scale of AI. Microsof... 2026-7-30 16:0:0 | 阅读: 58 | 收藏 | Microsoft Security Blog - www.microsoft.com microsoft security defender copilot cloud

​​Better security starts with better questions As organizations move beyond AI experimentation, success will depend on how effectively they combin... 2026-7-29 16:0:0 | 阅读: 40 | 收藏 | Microsoft Security Blog - www.microsoft.com security outcomes judgment matters signals

Enhancing AI security through global AI red teaming Most AI safety testing still happens inside the walls of individual organizations. That has res... 2026-7-27 16:25:0 | 阅读: 73 | 收藏 | Microsoft Security Blog - www.microsoft.com security microsoft expertise frontier academic

Email threat landscape: Q2 2026 trends and insights The second quarter of 2026 (April–June) was largely defined by the continuing downstream effect... 2026-7-23 15:0:0 | 阅读: 55 | 收藏 | Microsoft Security Blog - www.microsoft.com phishing microsoft malicious 2026 defender