Back to updates

Cybersecurity - 1

2025 (12)

November (4)

security: ​​Securing our future: November 2025 progress report on Microsoft’s Secure Future Initiative ​​

Microsoft Security Blog

2025-11-10

Microsoft published a November 2025 progress report for its Secure Future Initiative, reporting steady progress across all areas and engineering pillars. The initiative’s mission is to accelerate innovation, strengthen resilience, and lead the industry toward a safer digital future, with the report underscoring Microsoft’s continued commitment to security.

security: ​​Securing critical infrastructure: Why Europe’s risk-based regulations matter

Microsoft Security Blog

2025-11-05

The article explains how new European Union risk-based legislation helps CISOs strengthen cybersecurity for critical infrastructure by encouraging organizations to assess and prioritize risks, align controls with regulatory expectations, and build more resilient systems.

security: ​​Learn what generative AI can do for your security operations center

Microsoft Security Blog

2025-11-04

Microsoft Security Blog published an e-book that shows how generative AI can improve Security Operations Centers (SOCs) by reducing alert fatigue, speeding triage, enabling proactive threat hunting, and helping teams get ahead of cyberattacks.

security: SesameOp: Novel backdoor uses OpenAI Assistants API for command and control

Microsoft Security Blog

2025-11-03

Microsoft DART researchers identified a novel backdoor, dubbed SesameOp, that abuses the OpenAI Assistants API as a covert command-and-control (C2) channel. A component of the backdoor uses the Assistants API as a storage/relay to fetch commands and execute tasks inside compromised environments, avoiding traditional C2 methods.

October (8)

security: The new Microsoft Security Store unites partners and innovation

Microsoft Security Blog

2025-10-21

Microsoft announced the new Microsoft Security Store, a centralized gateway that helps customers discover, purchase, and deploy vetted security solutions and AI agents from leading partners, aiming to simplify procurement and accelerate partner-driven innovation.

security: Microsoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM

Microsoft Security Blog

2025-10-16

Microsoft has been recognized again as a Leader in the 2025 Gartner Magic Quadrant for Security Information and Event Management (SIEM), according to a post on the Microsoft Security Blog.

security: Extortion and ransomware drive over half of cyberattacks

Microsoft Security Blog

2025-10-16

Microsoft reports that extortion and ransomware account for over half of cyberattacks; in 80% of incidents their security teams investigated last year attackers attempted to steal data, driven more by financial gain than intelligence gathering.

security: The importance of hardening customer support tools against cyberattacks

Microsoft Security Blog

2025-10-15

Microsoft Security Blog warns that customer support tools, now more connected and data-rich, are increasingly targeted by cyberattacks. Hardening these systems is essential to safeguard customer trust, protect sensitive data, and maintain business continuity.

security: Microsoft raises the bar: A smarter way to measure AI for cybersecurity

Microsoft Security Blog

2025-10-14

Microsoft introduced ExCyTIn-Bench, an open-source benchmarking tool that evaluates how effectively AI systems perform real-world cybersecurity investigations, aiming to standardize measurement and improve AI-driven defensive capabilities.

security: Building a lasting security culture at Microsoft

Microsoft Security Blog

2025-10-13

Microsoft frames building a lasting security culture as a strategic priority and a call to action: security is people-centered, every employee has a role, and embedding secure practices into how people think, work, and collaborate creates a unified, proactive, and resilient defense for Microsoft and its customers.

security: Investigating targeted “payroll pirate” attacks affecting US universities

Microsoft Security Blog

2025-10-09

Microsoft Threat Intelligence reports a financially motivated actor tracked as Storm-2657 conducting "payroll pirate" attacks against US universities by compromising employee accounts, accessing employee profiles, and diverting salary payments to attacker-controlled accounts.

security: Inside Microsoft Threat Intelligence: Calm in the chaos

Microsoft Security Blog

2025-10-06

Microsoft’s Incident Response team works effectively amid the disorder caused by fast-moving threat actors, treating compromised environments, missing data, and shaken confidence as the starting point for investigations, as described in the Microsoft Security Blog post "Inside Microsoft Threat Intelligence: Calm in the chaos."