Back to updates

Microsoft Security - 1

2026 (11)

September (2)

security: Passkey-themed social engineering leads to identity and cloud compromise

Microsoft Security Blog

2026-09-09

Microsoft describes a threat campaign using passkey-themed social engineering to compromise identities and extend access into cloud services. The activity includes MFA persistence, Microsoft Graph reconnaissance, and access to SharePoint, OneDrive, and email data, with guidance on detection and mitigation.

security: Cybersecurity IR Workshop: The workshop you shouldn’t miss

Microsoft Security Blog

2026-09-01

Microsoft Security blog post promoting a cybersecurity incident response workshop focused on preparedness and response. It says the workshop shares practical insights from DART to improve cyber resilience before a crisis.

August (2)

security: ​​​​​​What’s new in Microsoft Security: August 2026

Microsoft Security Blog

2026-08-27

Microsoft’s August 2026 security update highlights new capabilities for monitoring agent activity, broader security coverage across supported environments, and improved security management across environments.

security: The patch window is collapsing: Why security needs a new control plane

Microsoft Security Blog

2026-08-25

Microsoft Security says organizations need protection that works between vulnerability discovery and remediation, because the patch window is shrinking. The post argues for a new security control plane to cover that gap.

July (4)

security: ​​​​What’s new in Microsoft Security: July 2026

Microsoft Security Blog

2026-07-30

Microsoft’s July 2026 Security update highlights new capabilities for securing AI environments, using AI for defense, and improving the underlying systems that AI-powered operations rely on. The provided excerpt does not include specific product changes or feature details.

security: ​​Better security starts with better questions

Microsoft Security Blog

2026-07-29

Microsoft Security says stronger security decisions come from asking better questions, using trusted AI, and combining AI outputs with human judgment. The post frames this as a way to help leaders make more confident decisions and build more resilient systems.

security: Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks

Microsoft Security Blog

2026-07-17

Microsoft Security says it will be at Black Hat USA 2026 with sessions on supply chain research, hands-on security experiences, expert conversations, and a reception. The post frames the event around trust, AI, and supply chain attacks.

security: Turning threat intelligence into decisive action with Defender Experts

Microsoft Security Blog

2026-07-15

Microsoft Security describes a Defender Experts post about helping security teams turn threat intelligence into action across endpoints, identities, cloud workloads, and third-party tools. The excerpt emphasizes that teams have more visibility but still face uncertainty from fragmented signals.

June (3)

security: ​​What’s new in Microsoft Security: June 2026

Microsoft Security Blog

2026-06-30

Microsoft’s June 2026 security update post says the month’s changes focus on identity and multicloud foundations, data protection across locations, and securing developer workflows for AI-related work. The provided excerpt does not include product-level details or specific feature announcements.

security: Chromium extension uses AI‑related branding to redirect browser search

Microsoft Security Blog

2026-06-29

Microsoft reports a malicious Chromium extension that used AI-related branding to impersonate Perplexity AI and redirect browser search traffic. The extension relied on MV3 APIs and intermediary infrastructure to steer searches away from intended destinations.

security: CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms

Microsoft Security Blog

2026-06-24

Microsoft’s post says CNAPP platforms are increasingly used to prioritize exploitable risks, reduce exposure, and embed security across the application lifecycle. It positions Microsoft’s approach as aligned with other leading cloud risk management platforms.