Back to updates

Security - 3

2026 (12)

August (6)

security: DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

Microsoft Security Blog

2026-08-10

Microsoft Threat Intelligence describes DeadLock ransomware as a financially motivated operation using a Rust-based encryptor and decentralized infrastructure for victim communications, negotiations, and data leak operations. The group uses double extortion to pressure victims.

security: ​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

Microsoft Security Blog

2026-08-05

Microsoft says KuppingerCole named it a Leader in the Leadership Compass for Cloud Native Application Protection Platforms (CNAPP). The provided excerpt does not include technical changes or product updates beyond that recognition.

security: From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

Microsoft Security Blog

2026-08-05

Microsoft describes a macOS ClickFix campaign that changed from openly delivering infostealer lures to placing them behind a browser-fingerprinting gate. The shift reduces visibility of the malicious infrastructure but also creates new detection opportunities for defenders.

security: ChainDrop supply chain compromise: Anatomy of a self-propagating worm

Microsoft Security Blog

2026-08-04

Microsoft describes ChainDrop, a credential-stealing worm embedded in 400+ compromised npm packages that spread by republishing malicious updates across software ecosystems. The post outlines the attack chain, affected environments, and guidance for detection, hunting, and remediation.

security: Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Microsoft Security Blog

2026-08-04

Microsoft says it is expanding its Zero Trust for AI strategy with new tools and guidance aimed at securing AI agents and DevSecOps environments. The post highlights a broader security approach for AI and related development workflows.

security: 128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

Microsoft Security Blog

2026-08-04

Microsoft Defender isolated a compromised QNET endpoint in 128 seconds, interrupting a multi-stage ransomware attack before the payload could persist or spread.

July (6)

security: CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Microsoft Security Blog

2026-07-31

Microsoft says Storm-2945, a sub-cluster of Midnight Blizzard, has been compromising sign-in portals at hospitality organizations since May 2026 to deliver malware to travelers and steal credentials. The campaign is named CaptiveCrunch and targets travelers worldwide.

security: ​​​​What’s new in Microsoft Security: July 2026

Microsoft Security Blog

2026-07-30

Microsoft’s July 2026 Security update highlights new capabilities for securing AI environments, using AI for defense, and improving the underlying systems that AI-powered operations rely on. The provided excerpt does not include specific product changes or feature details.

security: ​​Better security starts with better questions

Microsoft Security Blog

2026-07-29

Microsoft Security says stronger security decisions come from asking better questions, using trusted AI, and combining AI outputs with human judgment. The post frames this as a way to help leaders make more confident decisions and build more resilient systems.

security: Rethinking security for the age of AI

Microsoft Security Blog

2026-07-27

Microsoft says cybersecurity is changing in the AI era and introduces a new security cyber stack called Project Perception. The post frames this as a rethink of security architecture rather than a specific product release.

security: Enhancing AI security through global AI red teaming

Microsoft Security Blog

2026-07-27

Microsoft announced EXTRA, a global AI security initiative focused on AI safety research and red teaming. The program partners with universities, researchers, and regional experts to identify emerging AI risks and improve testing of frontier AI systems.

security: Email threat landscape: Q2 2026 trends and insights

Microsoft Security Blog

2026-07-23

Microsoft reports that Q2 2026 saw continued declines in several phishing techniques after disruption of the Tycoon2FA platform. Attackers shifted toward Teams-based social engineering and more automated, multi-stage attack chains.