Security - 4

2026 (12)

February (9)

security: 80% of Fortune 500 use active AI Agents: Observability, governance, and security shape the new frontier

Microsoft Security Blog

2026-02-10

Microsoft Security Blog post promoting its Cyber Pulse report, focused on cybersecurity risks related to active AI agents and the need for observability, governance, and security.

security: Manipulating AI memory for profit: The rise of AI Recommendation Poisoning

Microsoft Security Blog

2026-02-10

Microsoft security researchers describe a growing pattern of “AI Recommendation Poisoning,” where attackers poison an AI system’s memory to manipulate future recommendations for promotional gain.

security: A one-prompt attack that breaks LLM safety alignment

Microsoft Security Blog

2026-02-09

The provided excerpt is only a short teaser and does not include the article’s technical details, findings, or mitigations.

security: Analysis of active exploitation of SolarWinds Web Help Desk

Microsoft Security Blog

2026-02-07

Microsoft reports active exploitation of SolarWinds Web Help Desk using CVE-2025-40551 and CVE-2025-40536 that can lead to domain compromise, and provides guidance to patch, hunt, and mitigate.

security: New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan

Microsoft Security Blog

2026-02-05

Microsoft reports a new ClickFix variant, “CrashFix,” that intentionally crashes browsers to trick users into running commands that install a Python-based remote access trojan (RAT). The campaign abuses built-in utilities (finger.exe) and a portable Python runtime to reduce detection and maintain persistence on targeted systems.

security: The security implementation gap: Why Microsoft is supporting Operation Winter SHIELD

Microsoft Security Blog

2026-02-05

Microsoft explains that many incidents stem from inconsistent implementation of known security controls and describes its support for Operation Winter SHIELD to help organizations close this “implementation gap.”

security: Detecting backdoored language models at scale

Microsoft Security Blog

2026-02-04

Microsoft published research on detecting backdoors in open-weight language models and described a scanner intended to identify backdoored models at scale.

security: Microsoft SDL: Evolving security practices for an AI-powered world

Microsoft Security Blog

2026-02-03

Microsoft describes an updated Secure Development Lifecycle (SDL) approach aimed at securing AI systems, combining internal policy, security research, and enablement activities.

security: Infostealers without borders: macOS, Python stealers, and platform abuse

Microsoft Security Blog

2026-02-02

Microsoft describes recent infostealer activity targeting macOS, highlighting Python-based stealers and distribution techniques that abuse trusted platforms and common utilities.

January (3)

security: Case study: Securing AI application supply chains

Microsoft Security Blog

2026-01-30

The article argues that securing AI-powered applications requires a holistic supply-chain approach beyond protecting prompts, including monitoring frameworks, SDKs, and orchestration layers, plus enforcing strong runtime controls so security teams can detect, respond to, and remediate risks before exploitation.

security: Turning threat reports into detection insights with AI

Microsoft Security Blog

2026-01-29

The Microsoft Security Blog describes an AI-assisted workflow that converts lengthy incident reports and threat writeups into actionable detections by automatically extracting TTPs, mapping them to existing detection coverage, and flagging gaps — completing in minutes instead of days while preserving human expert review.

security: New Microsoft Data Security Index report explores secure AI adoption to protect sensitive data

Microsoft Security Blog

2026-01-29

The 2026 Microsoft Data Security Index examines how organizations can harness generative AI while protecting sensitive data, providing insights on secure AI adoption, governance, controls, and risk mitigation.