Microsoft Defender - 1

2026 (4)

May (1)

security: Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

Microsoft Security Blog

2026-05-08

Dirty Frag is a Linux local privilege escalation vulnerability in kernel networking and memory-fragment handling paths such as esp4, esp6, and rxrpc. Microsoft says it has seen limited in-the-wild exploitation and that Defender provides detection coverage.

March (2)

security: How Microsoft Defender protects high-value assets in real-world attack scenarios

Microsoft Security Blog

2026-03-27

Microsoft says Defender uses Microsoft Security Exposure Management to apply asset-aware protection for high-value systems such as domain controllers, web servers, and identity infrastructure. The article describes real-world attack scenarios and defense techniques for those critical assets.

security: Case study: How predictive shielding in Defender stopped GPO-based ransomware before it started

Microsoft Security Blog

2026-03-23

Microsoft Defender blocked a human-operated ransomware attack that used Group Policy Objects (GPOs) to disable defenses and deploy encryption at scale. Predictive shielding hardened 700 devices in time, preventing any GPO-based encryptions and blocking most of the attempted impact.

February (1)

security: Scaling security operations with Microsoft Defender autonomous defense and expert-led services

Microsoft Security Blog

2026-02-24

Guide-style post arguing that manual SOC processes and legacy tools can’t keep up with AI-enabled attacks, and positioning Microsoft Defender’s autonomous capabilities plus expert-led services as the proposed approach.