Microsoft Security Blog - 2

2026 (9)

January (9)

security: Microsoft announces the 2026 Security Excellence Awards winners

Microsoft Security Blog

2026-01-27

Microsoft announced the winners of the 2026 Security Excellence Awards, recognizing innovative defenders who went above and beyond. The announcement appeared on the Microsoft Security Blog.

security: Security strategies for safeguarding governmental data

Microsoft Security Blog

2026-01-26

A concise overview of strategies and leadership guidance for government agencies to protect sensitive data and improve overall cybersecurity resilience, as highlighted on the Microsoft Security Blog.

security: From runtime risk to real‑time defense: Securing AI agents

Microsoft Security Blog

2026-01-23

Microsoft Security Blog warns that attackers are increasingly exploiting generative orchestration, so securing AI agents at runtime is essential and requires real‑time defensive measures to detect and mitigate threats during operation.

security: Resurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint

Microsoft Security Blog

2026-01-22

Microsoft Defender researchers reported a resurgence of a multi-stage Adversary-in-the-Middle (AiTM) phishing campaign paired with business email compromise (BEC) that abused SharePoint and targeted multiple organizations in the energy sector, according to a Microsoft Security Blog post.

security: A new era of agents, a new era of posture

Microsoft Security Blog

2026-01-21

Microsoft's post argues that the rise of autonomous AI agents is changing how organizations operate and requires a rethinking of security posture because increased agent autonomy expands the attack surface.

security: Four priorities for AI-powered identity and network access security in 2026

Microsoft Security Blog

2026-01-20

The Microsoft Security Blog post outlines four key identity and network access priorities for 2026, aimed at strengthening an organization’s identity security baseline by leveraging AI and modern access controls.

security: Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms

Microsoft Security Blog

2026-01-14

Microsoft was named a Leader in the 2025-2026 IDC MarketScape for Unified AI Governance Platforms, recognizing the company's commitment to making AI innovation safe, responsible, and enterprise-ready, according to the Microsoft Security Blog.

security: Phishing actors exploit complex routing and misconfigurations to spoof domains

Microsoft Security Blog

2026-01-06

Threat actors are exploiting complex mail routing and misconfigured anti-spoof protections to send phishing emails that appear to come from internal senders.

security: Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services

Microsoft Security Blog

2026-01-06

Microsoft announced the Microsoft Defender Experts Suite, an integrated collection of expert-led services designed to help security teams respond to and keep pace with modern cyberattacks, as described on the Microsoft Security Blog.

2025 (3)

December (3)

security: Access Fabric: A modern approach to identity and network access

Microsoft Security Blog

2025-12-17

Microsoft defines Access Fabric as a unified access security solution that continuously and in real time decides who can access what resources, from where, and under what conditions.

security: Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

Microsoft Security Blog

2025-12-15

The Microsoft Security Blog post describes CVE-2025-55182 (React2Shell), a critical pre-authentication remote code execution vulnerability that affects React Server Components and related frameworks. The advisory notes that CVE-2025-66478 was merged into CVE-2025-55182.

security: Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense

Microsoft Security Blog

2025-12-15

Microsoft was named an overall leader in the KuppingerCole Leadership Compass for Generative AI Defense, announced on the Microsoft Security Blog.