Back to updates

Security - 1

2025 (12)

November (6)

security: ​​Securing our future: November 2025 progress report on Microsoft’s Secure Future Initiative ​​

Microsoft Security Blog

2025-11-10

Microsoft published a November 2025 progress report for its Secure Future Initiative, reporting steady progress across all areas and engineering pillars. The initiative’s mission is to accelerate innovation, strengthen resilience, and lead the industry toward a safer digital future, with the report underscoring Microsoft’s continued commitment to security.

security: ​​Whisper Leak: A novel side-channel attack on remote language models

Microsoft Security Blog

2025-11-07

Microsoft disclosed a new side-channel attack called "Whisper Leak" that enables attackers to infer conversation topics from interactions with remote language models even when communications are encrypted. The finding was published on the Microsoft Security Blog.

security: New IDC research highlights a major cloud security shift

Microsoft Security Blog

2025-11-06

IDC research urges CISOs to adopt AI-powered, integrated cloud security platforms—such as CNAPP, XDR, and SIEM—to lower risk, reduce complexity, and improve resilience, according to a Microsoft Security Blog post.

security: ​​Securing critical infrastructure: Why Europe’s risk-based regulations matter

Microsoft Security Blog

2025-11-05

The article explains how new European Union risk-based legislation helps CISOs strengthen cybersecurity for critical infrastructure by encouraging organizations to assess and prioritize risks, align controls with regulatory expectations, and build more resilient systems.

security: ​​Learn what generative AI can do for your security operations center

Microsoft Security Blog

2025-11-04

Microsoft Security Blog published an e-book that shows how generative AI can improve Security Operations Centers (SOCs) by reducing alert fatigue, speeding triage, enabling proactive threat hunting, and helping teams get ahead of cyberattacks.

security: SesameOp: Novel backdoor uses OpenAI Assistants API for command and control

Microsoft Security Blog

2025-11-03

Microsoft DART researchers identified a novel backdoor, dubbed SesameOp, that abuses the OpenAI Assistants API as a covert command-and-control (C2) channel. A component of the backdoor uses the Assistants API as a storage/relay to fetch commands and execute tasks inside compromised environments, avoiding traditional C2 methods.

October (6)

security: The 5 generative AI security threats you need to know about detailed in new e-book

Microsoft Security Blog

2025-10-30

Microsoft's blog post summarizes a new e-book that outlines the main challenges organizations face with generative AI, details the top generative AI security threats, and recommends steps companies can take to strengthen their security posture against unpredictable AI risks.

security: Harden your identity defense with improved protection, deeper correlation, and richer context

Microsoft Security Blog

2025-10-23

Microsoft announced expanded Identity Threat Detection and Response (ITDR) capabilities, including the new Microsoft Defender for Identity sensor now generally available, delivering improved protection, deeper correlation across signals, and richer contextual information to help organizations modernize their identity defenses.

security: The CISO imperative: Building resilience in an era of accelerated cyberthreats

Microsoft Security Blog

2025-10-22

Microsoft's Digital Defense Report 2025 highlights a changing cyberthreat landscape with a rise in financially motivated attacks and ongoing nation-state risks. The article argues that CISOs must focus on organizational response, adaptation, and resilience-building to meet accelerating threats.

security: The new Microsoft Security Store unites partners and innovation

Microsoft Security Blog

2025-10-21

Microsoft announced the new Microsoft Security Store, a centralized gateway that helps customers discover, purchase, and deploy vetted security solutions and AI agents from leading partners, aiming to simplify procurement and accelerate partner-driven innovation.

security: Inside the attack chain: Threat activity targeting Azure Blob Storage

Microsoft Security Blog

2025-10-20

Microsoft’s Security Blog highlights that Azure Blob Storage is an attractive, high-value target because it stores massive volumes of unstructured data across many workloads. Threat actors are increasingly using sophisticated attack chains that exploit misconfigurations, exposed credentials, and evolving cloud-specific tactics to compromise Blob Storage.

security: Microsoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM

Microsoft Security Blog

2025-10-16

Microsoft has been recognized again as a Leader in the 2025 Gartner Magic Quadrant for Security Information and Event Management (SIEM), according to a post on the Microsoft Security Blog.