Back to updates

Microsoft Security Blog - 4

2025 (10)

October (4)

security: Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog

Microsoft Security Blog

2025-10-09

Microsoft highlights security as a central theme at Ignite 2025, offering dedicated sessions and hands-on experiences focused on securing agentic AI for security professionals and leaders. The blog points readers to the session catalog for details and scheduling.

security: Disrupting threats targeting Microsoft Teams

Microsoft Security Blog

2025-10-07

Microsoft highlights that threat actors are abusing Microsoft Teams features across the attack chain and urges defenders to proactively monitor, detect, and respond. The blog recommends layered countermeasures and optimal controls across identity, endpoints, data and app protection, and network controls to better protect enterprise Teams users.

security: New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Microsoft Security Blog

2025-10-07

Microsoft’s Secure Future Initiative (SFI) patterns and practices provide practical, practitioner‑led guidance based on Microsoft’s Zero Trust implementation. The guides are designed to help organizations accelerate security maturity, reduce implementation friction, and build systems that are secure by design, by default, and in operation.

security: Cybersecurity Awareness Month: Security starts with you

Microsoft Security Blog

2025-10-01

Microsoft highlights that cybersecurity is as much about people as technology in its Cybersecurity Awareness Month post, "Security starts with you." The blog directs readers to Microsoft’s resources and practical guidance to help individuals stay safe online and adopt safer habits.

September (4)

security: Empowering defenders in the era of agentic AI with Microsoft Sentinel

Microsoft Security Blog

2025-09-30

Microsoft Sentinel is expanding into an agentic security platform: the Sentinel data lake is generally available, and Sentinel graph plus the Sentinel Model Context Protocol (MCP) server are available in public preview to enable richer data, graph-based analysis, and model-aware agentic workflows for defenders.

security: Microsoft Purview delivered 30% reduction in data breach likelihood

Microsoft Security Blog

2025-09-23

A Forrester Consulting Total Economic Impact study, commissioned by Microsoft, found that unifying data security, governance, and compliance on Microsoft Purview reduced the likelihood of data breaches by 30% and delivered measurable benefits for modernizing data protection.

security: Microsoft Purview innovations for your Fabric data: Unify data security and governance for the AI era

Microsoft Security Blog

2025-09-16

Microsoft Fabric and Purview teams announced their participation in the European Microsoft Fabric Community Conference and highlighted Microsoft Purview innovations focused on unifying data security and governance for the AI era in a Microsoft Security Blog post.

security: Azure mandatory multifactor authentication: Phase 2 starting in October 2025

Microsoft Security Blog

2025-09-05

Microsoft Azure will begin Phase 2 mandatory multi-factor authentication enforcement at the Azure Resource Manager layer starting October 1, 2025, as announced on the Microsoft Security Blog.

August (2)

security: Storm-0501’s evolving techniques lead to cloud-based ransomware

Microsoft Security Blog

2025-08-27

Microsoft reports that financially motivated threat actor Storm-0501 has shifted from deploying on-premises endpoint ransomware toward cloud-based ransomware tactics, increasingly focusing on cloud-specific TTPs after previously targeting hybrid cloud environments.

security: Microsoft ranked number one in modern endpoint security market share third year in a row

Microsoft Security Blog

2025-08-27

Microsoft was ranked number one in the modern endpoint security market share for the third consecutive year, according to a new IDC report, as announced on the Microsoft Security Blog.