Microsoft Security Blog - 2

2025 (12)

October (7)

security: Inside the attack chain: Threat activity targeting Azure Blob Storage

Microsoft Security Blog

2025-10-20

Microsoft’s Security Blog highlights that Azure Blob Storage is an attractive, high-value target because it stores massive volumes of unstructured data across many workloads. Threat actors are increasingly using sophisticated attack chains that exploit misconfigurations, exposed credentials, and evolving cloud-specific tactics to compromise Blob Storage.

security: Microsoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM

Microsoft Security Blog

2025-10-16

Microsoft has been recognized again as a Leader in the 2025 Gartner Magic Quadrant for Security Information and Event Management (SIEM), according to a post on the Microsoft Security Blog.

security: The importance of hardening customer support tools against cyberattacks

Microsoft Security Blog

2025-10-15

Microsoft Security Blog warns that customer support tools, now more connected and data-rich, are increasingly targeted by cyberattacks. Hardening these systems is essential to safeguard customer trust, protect sensitive data, and maintain business continuity.

security: Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog

Microsoft Security Blog

2025-10-09

Microsoft highlights security as a central theme at Ignite 2025, offering dedicated sessions and hands-on experiences focused on securing agentic AI for security professionals and leaders. The blog points readers to the session catalog for details and scheduling.

security: Disrupting threats targeting Microsoft Teams

Microsoft Security Blog

2025-10-07

Microsoft highlights that threat actors are abusing Microsoft Teams features across the attack chain and urges defenders to proactively monitor, detect, and respond. The blog recommends layered countermeasures and optimal controls across identity, endpoints, data and app protection, and network controls to better protect enterprise Teams users.

security: New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Microsoft Security Blog

2025-10-07

Microsoft’s Secure Future Initiative (SFI) patterns and practices provide practical, practitioner‑led guidance based on Microsoft’s Zero Trust implementation. The guides are designed to help organizations accelerate security maturity, reduce implementation friction, and build systems that are secure by design, by default, and in operation.

security: Cybersecurity Awareness Month: Security starts with you

Microsoft Security Blog

2025-10-01

Microsoft highlights that cybersecurity is as much about people as technology in its Cybersecurity Awareness Month post, "Security starts with you." The blog directs readers to Microsoft’s resources and practical guidance to help individuals stay safe online and adopt safer habits.

September (4)

security: Empowering defenders in the era of agentic AI with Microsoft Sentinel

Microsoft Security Blog

2025-09-30

Microsoft Sentinel is expanding into an agentic security platform: the Sentinel data lake is generally available, and Sentinel graph plus the Sentinel Model Context Protocol (MCP) server are available in public preview to enable richer data, graph-based analysis, and model-aware agentic workflows for defenders.

security: Microsoft Purview delivered 30% reduction in data breach likelihood

Microsoft Security Blog

2025-09-23

A Forrester Consulting Total Economic Impact study, commissioned by Microsoft, found that unifying data security, governance, and compliance on Microsoft Purview reduced the likelihood of data breaches by 30% and delivered measurable benefits for modernizing data protection.

security: Microsoft Purview innovations for your Fabric data: Unify data security and governance for the AI era

Microsoft Security Blog

2025-09-16

Microsoft Fabric and Purview teams announced their participation in the European Microsoft Fabric Community Conference and highlighted Microsoft Purview innovations focused on unifying data security and governance for the AI era in a Microsoft Security Blog post.

security: Azure mandatory multifactor authentication: Phase 2 starting in October 2025

Microsoft Security Blog

2025-09-05

Microsoft Azure will begin Phase 2 mandatory multi-factor authentication enforcement at the Azure Resource Manager layer starting October 1, 2025, as announced on the Microsoft Security Blog.

August (1)

security: Storm-0501’s evolving techniques lead to cloud-based ransomware

Microsoft Security Blog

2025-08-27

Microsoft reports that financially motivated threat actor Storm-0501 has shifted from deploying on-premises endpoint ransomware toward cloud-based ransomware tactics, increasingly focusing on cloud-specific TTPs after previously targeting hybrid cloud environments.