Back to updates

Microsoft Defender - 1

2026 (6)

March (2)

security: How Microsoft Defender protects high-value assets in real-world attack scenarios

Microsoft Security Blog

2026-03-27

Microsoft says Defender uses Microsoft Security Exposure Management to apply asset-aware protection for high-value systems such as domain controllers, web servers, and identity infrastructure. The article describes real-world attack scenarios and defense techniques for those critical assets.

security: Case study: How predictive shielding in Defender stopped GPO-based ransomware before it started

Microsoft Security Blog

2026-03-23

Microsoft Defender blocked a human-operated ransomware attack that used Group Policy Objects (GPOs) to disable defenses and deploy encryption at scale. Predictive shielding hardened 700 devices in time, preventing any GPO-based encryptions and blocking most of the attempted impact.

February (2)

security: Scaling security operations with Microsoft Defender autonomous defense and expert-led services

Microsoft Security Blog

2026-02-24

Guide-style post arguing that manual SOC processes and legacy tools can’t keep up with AI-enabled attacks, and positioning Microsoft Defender’s autonomous capabilities plus expert-led services as the proposed approach.

security: Copilot Studio agent security: Top 10 risks you can detect and prevent

Microsoft Security Blog

2026-02-12

Microsoft outlines 10 common security risks in Copilot Studio agents and pairs each with suggested detection and mitigation approaches using Microsoft Defender. The focus is on preventing exposure from configuration, access, and orchestration weaknesses.

January (2)

security: Resurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint

Microsoft Security Blog

2026-01-22

Microsoft Defender researchers reported a resurgence of a multi-stage Adversary-in-the-Middle (AiTM) phishing campaign paired with business email compromise (BEC) that abused SharePoint and targeted multiple organizations in the energy sector, according to a Microsoft Security Blog post.

security: Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services

Microsoft Security Blog

2026-01-06

Microsoft announced the Microsoft Defender Experts Suite, an integrated collection of expert-led services designed to help security teams respond to and keep pace with modern cyberattacks, as described on the Microsoft Security Blog.

2025 (2)

October (1)

security: Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability

Microsoft Security Blog

2025-10-06

Microsoft observed active exploitation of CVE-2025-10035, a deserialization vulnerability in the GoAnywhere Managed File Transfer (MFT) License Servlet, by the financially motivated actor Storm-1175 (associated with Medusa ransomware). The blog post raises awareness and describes end-to-end protection coverage in Microsoft Defender.

September (1)

security: Microsoft Defender delivered 242% return on investment over three years​​

Microsoft Security Blog

2025-09-18

A 2025 Forrester Consulting TEI study found Microsoft Defender delivered a 242% ROI over three years, produced $17.8 million in benefits, and paid for itself in under six months by helping organizations consolidate security tools and improve SecOps efficiency with AI and automation.