Back to updates

Security - 2

2026 (12)

January (12)

security: Case study: Securing AI application supply chains

Microsoft Security Blog

2026-01-30

The article argues that securing AI-powered applications requires a holistic supply-chain approach beyond protecting prompts, including monitoring frameworks, SDKs, and orchestration layers, plus enforcing strong runtime controls so security teams can detect, respond to, and remediate risks before exploitation.

security: Turning threat reports into detection insights with AI

Microsoft Security Blog

2026-01-29

The Microsoft Security Blog describes an AI-assisted workflow that converts lengthy incident reports and threat writeups into actionable detections by automatically extracting TTPs, mapping them to existing detection coverage, and flagging gaps — completing in minutes instead of days while preserving human expert review.

security: New Microsoft Data Security Index report explores secure AI adoption to protect sensitive data

Microsoft Security Blog

2026-01-29

The 2026 Microsoft Data Security Index examines how organizations can harness generative AI while protecting sensitive data, providing insights on secure AI adoption, governance, controls, and risk mitigation.

security: Microsoft announces the 2026 Security Excellence Awards winners

Microsoft Security Blog

2026-01-27

Microsoft announced the winners of the 2026 Security Excellence Awards, recognizing innovative defenders who went above and beyond. The announcement appeared on the Microsoft Security Blog.

security: Security strategies for safeguarding governmental data

Microsoft Security Blog

2026-01-26

A concise overview of strategies and leadership guidance for government agencies to protect sensitive data and improve overall cybersecurity resilience, as highlighted on the Microsoft Security Blog.

security: From runtime risk to real‑time defense: Securing AI agents

Microsoft Security Blog

2026-01-23

Microsoft Security Blog warns that attackers are increasingly exploiting generative orchestration, so securing AI agents at runtime is essential and requires real‑time defensive measures to detect and mitigate threats during operation.

security: Microsoft Security success stories: Why integrated security is the foundation of AI transformation

Microsoft Security Blog

2026-01-22

Microsoft highlights how Ford, Icertis, and TriNet modernized their security posture by adopting integrated Microsoft security solutions—embedding Zero Trust principles, automating defenses, and enabling secure AI innovation at scale.

security: Resurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint

Microsoft Security Blog

2026-01-22

Microsoft Defender researchers reported a resurgence of a multi-stage Adversary-in-the-Middle (AiTM) phishing campaign paired with business email compromise (BEC) that abused SharePoint and targeted multiple organizations in the energy sector, according to a Microsoft Security Blog post.

security: A new era of agents, a new era of posture

Microsoft Security Blog

2026-01-21

Microsoft's post argues that the rise of autonomous AI agents is changing how organizations operate and requires a rethinking of security posture because increased agent autonomy expands the attack surface.

security: Four priorities for AI-powered identity and network access security in 2026

Microsoft Security Blog

2026-01-20

The Microsoft Security Blog post outlines four key identity and network access priorities for 2026, aimed at strengthening an organization’s identity security baseline by leveraging AI and modern access controls.

security: Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms

Microsoft Security Blog

2026-01-14

Microsoft was named a Leader in the 2025-2026 IDC MarketScape for Unified AI Governance Platforms, recognizing the company's commitment to making AI innovation safe, responsible, and enterprise-ready, according to the Microsoft Security Blog.

security: Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations

Microsoft Security Blog

2026-01-14

Microsoft investigated RedVDS, a virtual desktop provider whose services were purchased by a global network of disparate cybercriminals to target multiple sectors. Working with law enforcement worldwide, Microsoft's Digital Crimes Unit helped disrupt RedVDS infrastructure and related operations, a disruption detailed in a Microsoft Security Blog post.