Back to updates

Microsoft Security - 1

2026 (10)

April (6)

security: What’s new, updated, or recently released in Microsoft Security

Microsoft Security Blog

2026-04-30

Microsoft Security published a brief In the Loop roundup page highlighting recently released, updated, or new security items. The provided content does not include any specific product changes or feature details.

security: Email threat landscape: Q1 2026 trends and insights

Microsoft Security Blog

2026-04-30

Microsoft reported that email threats rose in early 2026, driven by credential phishing, QR code phishing, and CAPTCHA-gated campaigns. It also said disruption of the Tycoon2FA phishing platform reduced observed volume by 15% and prompted changes in attacker tactics.

security: Detection strategies across cloud and identities against infiltrating IT workers

Microsoft Security Blog

2026-04-21

Microsoft Security published a post on detection strategies for infiltrating IT workers in cloud and identity environments. It frames the topic around increased remote hiring, digital onboarding, and reliance on online identity verification and remote access.

security: Containing a domain compromise: How predictive shielding shut down lateral movement

Microsoft Security Blog

2026-04-17

Microsoft describes a real-world domain compromise where exposure-based containment and predictive shielding were used to slow lateral movement, stop credential abuse, and interrupt the attacker’s progress.

security: Building your cryptographic inventory: A customer strategy for cryptographic posture management

Microsoft Security Blog

2026-04-16

Microsoft published guidance on building a cryptographic inventory to improve cryptographic posture management and prepare for quantum-safe migration. The post points to Microsoft Security tools, lifecycle best practices, and partner solutions.

security: Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

Microsoft Security Blog

2026-04-06

Microsoft says Storm-1175 is running fast-moving Medusa ransomware campaigns that exploit recently disclosed vulnerabilities in web-facing systems for initial access, data theft, and ransomware deployment. The actor uses Medusa ransomware, also referred to as Gaze.exe.

March (2)

security: The threat to critical infrastructure has changed. Has your readiness?

Microsoft Security Blog

2026-03-31

Microsoft says critical infrastructure threat patterns are changing and highlights five facts CI leaders should act on in 2026 based on current Microsoft Threat Intelligence observations across sectors. The post is a short security blog entry pointing readers to the full analysis.

security: Guidance for detecting, investigating, and defending against the Trivy supply chain compromise

Microsoft Security Blog

2026-03-25

Microsoft describes a Trivy supply-chain compromise in which attackers abused trusted distribution channels to deliver credential-stealing malware into CI/CD pipelines. The post outlines attacker techniques plus detection, investigation, and defense steps for security teams.

February (2)

security: Unify now or pay later: New research exposes the operational cost of a fragmented SOC

Microsoft Security Blog

2026-02-17

Microsoft and Omdia report that fragmented security tooling and workflows are increasing SOC operational strain and contributing to overload.

security: Your complete guide to Microsoft experiences at RSAC™ 2026 Conference

Microsoft Security Blog

2026-02-12

Microsoft announced its presence at the RSAC 2026 Conference and positioned its show-floor content around “Frontier Firms,” described as human-led and agent-operated organizations.