Back to updates

Incident Response - 1

2025 (4)

October (2)

security: The CISO imperative: Building resilience in an era of accelerated cyberthreats

Microsoft Security Blog

2025-10-22

Microsoft's Digital Defense Report 2025 highlights a changing cyberthreat landscape with a rise in financially motivated attacks and ongoing nation-state risks. The article argues that CISOs must focus on organizational response, adaptation, and resilience-building to meet accelerating threats.

security: Inside Microsoft Threat Intelligence: Calm in the chaos

Microsoft Security Blog

2025-10-06

Microsoft’s Incident Response team works effectively amid the disorder caused by fast-moving threat actors, treating compromised environments, missing data, and shaken confidence as the starting point for investigations, as described in the Microsoft Security Blog post "Inside Microsoft Threat Intelligence: Calm in the chaos."

September (1)

security: Retail at risk: How one alert uncovered a persistent cyberthreat​​

Microsoft Security Blog

2025-09-24

Microsoft's Cyberattack Series examines a retail incident where a single security alert exposed a persistent cyberthreat. Attackers exploited unpatched SharePoint vulnerabilities and compromised identities to infiltrate networks, causing widespread operational risk—echoed by industry statistics (60% operational disruptions, 43% breaches). Microsoft’s Detection and Response Team (DART) provided forensic analysis and actionable remediation guidance; the full report offers detailed findings and defensive recommendations.

August (1)

security: Storm-0501’s evolving techniques lead to cloud-based ransomware

Microsoft Security Blog

2025-08-27

Microsoft reports that financially motivated threat actor Storm-0501 has shifted from deploying on-premises endpoint ransomware toward cloud-based ransomware tactics, increasingly focusing on cloud-specific TTPs after previously targeting hybrid cloud environments.