Back to updates

Security - 5

2026 (8)

September (2)

security: Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Microsoft Security Blog

2026-09-01

Microsoft describes an active malware campaign that uses fake software download pages and repackaged installer archives to impersonate legitimate vendors. The post includes observed tactics, Defender XDR detections, indicators of compromise, and mitigation guidance.

security: Cybersecurity IR Workshop: The workshop you shouldn’t miss

Microsoft Security Blog

2026-09-01

Microsoft Security blog post promoting a cybersecurity incident response workshop focused on preparedness and response. It says the workshop shares practical insights from DART to improve cyber resilience before a crisis.

August (6)

security: TerminalFix campaign deploys a reverse tunnel through multistage intrusion

Microsoft Security Blog

2026-08-29

Microsoft Threat Intelligence analyzed the TerminalFix ClickFix campaign, which uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel in a multistage intrusion. The post includes detections and hunting guidance.

security: ​​​​​​What’s new in Microsoft Security: August 2026

Microsoft Security Blog

2026-08-27

Microsoft’s August 2026 security update highlights new capabilities for monitoring agent activity, broader security coverage across supported environments, and improved security management across environments.

security: When AI infrastructure becomes the target: Securing gateways and control points

Microsoft Security Blog

2026-08-26

Microsoft Threat Intelligence reports on attacks against exposed AI infrastructure, focusing on LiteLLM gateway exploitation and related credential theft, persistence, and cryptomining activity. The post highlights gateways and other control points as targets that need protection.

security: The patch window is collapsing: Why security needs a new control plane

Microsoft Security Blog

2026-08-25

Microsoft Security says organizations need protection that works between vulnerability discovery and remediation, because the patch window is shrinking. The post argues for a new security control plane to cover that gap.

security: Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Microsoft Security Blog

2026-08-19

Microsoft says it was named a visionary leader in Frost & Sullivan’s 2026 Frost Radar for Cloud Workload Protection Platforms, citing Microsoft Defender for Cloud’s unified runtime security. The post is a brief recognition announcement with no product changes described.

security: Hunting MacSync Stealer infrastructure through behavioral pivots

Microsoft Security Blog

2026-08-18

Microsoft describes how it tracked MacSync Stealer infrastructure despite rapid domain rotation by using stable behavioral pivots. The investigation identified more than 30 related domains.