Back to updates

Microsoft Security Blog - 1

2025 (12)

December (8)

security: Access Fabric: A modern approach to identity and network access

Microsoft Security Blog

2025-12-17

Microsoft defines Access Fabric as a unified access security solution that continuously and in real time decides who can access what resources, from where, and under what conditions.

security: Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

Microsoft Security Blog

2025-12-15

The Microsoft Security Blog post describes CVE-2025-55182 (React2Shell), a critical pre-authentication remote code execution vulnerability that affects React Server Components and related frameworks. The advisory notes that CVE-2025-66478 was merged into CVE-2025-55182.

security: Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense

Microsoft Security Blog

2025-12-15

Microsoft was named an overall leader in the KuppingerCole Leadership Compass for Generative AI Defense, announced on the Microsoft Security Blog.

security: Imposter for hire: How fake people can gain very real access

Microsoft Security Blog

2025-12-11

The Microsoft Security Blog post warns that 'fake employees'—synthetic or forged identities created to look like legitimate workers—are an emerging threat that can infiltrate organizations and obtain real access. It outlines common ways these imposters gain entry through onboarding gaps, stolen or fabricated credentials, and social engineering, and recommends operational and technical controls to reduce risk.

security: Clarity in complexity: New insights for transparent email security

Microsoft Security Blog

2025-12-10

Microsoft’s new benchmarking report examines how layered email defenses perform in real-world conditions, providing transparent metrics and practical insights to help organizations strengthen email protection and reduce risk.

security: Changing the physics of cyber defense

Microsoft Security Blog

2025-12-09

The article explains how cyber defense is shifting by applying graph-powered approaches and AI to accelerate threat detection and strengthen basic security hygiene across organizations.

security: Microsoft named a leader in the 2025 Gartner® Magic Quadrant™ for Email Security

Microsoft Security Blog

2025-12-05

Microsoft was named a Leader in the 2025 Gartner® Magic Quadrant™ for Email Security, highlighting the innovative capabilities of Microsoft Defender for Office 365.

security: Cybersecurity strategies to prioritize now​​

Microsoft Security Blog

2025-12-04

Microsoft Security Blog post by Damon Becknel, Vice President and Deputy CISO for Regulated Industries, outlining four cybersecurity priorities to act on immediately.

November (2)

security: Microsoft named a Leader in the Gartner® Magic Quadrant™ for Access Management for the ninth consecutive year

Microsoft Security Blog

2025-11-21

Microsoft was named a Leader in the 2025 Gartner® Magic Quadrant™ for Access Management, marking the ninth consecutive year the company has received this recognition.

security: ​​Ambient and autonomous security for the agentic era​​

Microsoft Security Blog

2025-11-18

Microsoft outlines a vision for 'ambient and autonomous' security to protect AI-driven systems in the emerging agentic era, proposing security become a foundational, proactive capability rather than an add-on.

October (2)

security: Harden your identity defense with improved protection, deeper correlation, and richer context

Microsoft Security Blog

2025-10-23

Microsoft announced expanded Identity Threat Detection and Response (ITDR) capabilities, including the new Microsoft Defender for Identity sensor now generally available, delivering improved protection, deeper correlation across signals, and richer contextual information to help organizations modernize their identity defenses.

security: The new Microsoft Security Store unites partners and innovation

Microsoft Security Blog

2025-10-21

Microsoft announced the new Microsoft Security Store, a centralized gateway that helps customers discover, purchase, and deploy vetted security solutions and AI agents from leading partners, aiming to simplify procurement and accelerate partner-driven innovation.