Security - 3

2026 (4)

January (4)

security: How Microsoft builds privacy and security to work hand-in-hand

Microsoft Security Blog

2026-01-13

The article describes how Microsoft aligns privacy and security initiatives, using advanced tools and adherence to global compliance standards to protect customer data and foster trust.

security: Explore the latest Microsoft Incident Response proactive services for enhanced resilience

Microsoft Security Blog

2026-01-07

Microsoft Incident Response has introduced new proactive services that use expert‑led preparation and advanced intelligence to convert security uncertainty into operational readiness and improved organizational resilience.

security: Phishing actors exploit complex routing and misconfigurations to spoof domains

Microsoft Security Blog

2026-01-06

Threat actors are exploiting complex mail routing and misconfigured anti-spoof protections to send phishing emails that appear to come from internal senders.

security: Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services

Microsoft Security Blog

2026-01-06

Microsoft announced the Microsoft Defender Experts Suite, an integrated collection of expert-led services designed to help security teams respond to and keep pace with modern cyberattacks, as described on the Microsoft Security Blog.

2025 (8)

December (8)

security: New Microsoft e-book: 3 reasons point solutions are holding you back

Microsoft Security Blog

2025-12-18

Microsoft published an e-book arguing that replacing isolated point solutions with a unified, AI-ready security platform delivers greater speed, operational resilience, and measurable security gains. The blog post announces the e-book and invites readers to explore the guidance.

security: Access Fabric: A modern approach to identity and network access

Microsoft Security Blog

2025-12-17

Microsoft defines Access Fabric as a unified access security solution that continuously and in real time decides who can access what resources, from where, and under what conditions.

security: Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

Microsoft Security Blog

2025-12-15

The Microsoft Security Blog post describes CVE-2025-55182 (React2Shell), a critical pre-authentication remote code execution vulnerability that affects React Server Components and related frameworks. The advisory notes that CVE-2025-66478 was merged into CVE-2025-55182.

security: Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense

Microsoft Security Blog

2025-12-15

Microsoft was named an overall leader in the KuppingerCole Leadership Compass for Generative AI Defense, announced on the Microsoft Security Blog.

security: Imposter for hire: How fake people can gain very real access

Microsoft Security Blog

2025-12-11

The Microsoft Security Blog post warns that 'fake employees'—synthetic or forged identities created to look like legitimate workers—are an emerging threat that can infiltrate organizations and obtain real access. It outlines common ways these imposters gain entry through onboarding gaps, stolen or fabricated credentials, and social engineering, and recommends operational and technical controls to reduce risk.

security: From awareness to action: Building a security-first culture for the agentic AI era

Microsoft Security Blog

2025-12-10

Microsoft emphasizes that insights from Cybersecurity Awareness Month and Microsoft Ignite 2025 show security remains a top business priority. The article calls for moving from awareness to concrete action by building a security-first culture suited to the risks and opportunities of agentic (autonomous) AI, combining leadership commitment, policy and governance, workforce training, and technical controls.

security: Clarity in complexity: New insights for transparent email security

Microsoft Security Blog

2025-12-10

Microsoft’s new benchmarking report examines how layered email defenses perform in real-world conditions, providing transparent metrics and practical insights to help organizations strengthen email protection and reduce risk.

security: Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

Microsoft Security Blog

2025-12-09

Shai‑Hulud 2.0 is a large-scale supply chain attack in which adversaries maliciously modified hundreds of public packages to compromise developer environments, CI/CD pipelines, and cloud workloads in order to harvest credentials and configuration secrets. Microsoft published guidance to detect, investigate, and defend against these compromises across development toolchains, build systems, and cloud assets.