Back to updates

Microsoft Security - 1

2026 (6)

October (1)

security: 3 lessons from frontier AI vulnerability research

Microsoft Security Blog

2026-10-07

Microsoft Security says its FORGE Lab is applying frontier AI methods to scale vulnerability research beyond Windows, including work on the Linux kernel. The post highlights three takeaways from that research effort.

September (3)

security: ​​​​​​​​What’s new in Microsoft Security: September 2026​​

Microsoft Security Blog

2026-09-24

Microsoft Security’s September 2026 update focuses on discovering and controlling local AI agents, extending Zero Trust controls to agent traffic, and improving SOC foundational capabilities.

security: Passkey-themed social engineering leads to identity and cloud compromise

Microsoft Security Blog

2026-09-09

Microsoft describes a threat campaign using passkey-themed social engineering to compromise identities and extend access into cloud services. The activity includes MFA persistence, Microsoft Graph reconnaissance, and access to SharePoint, OneDrive, and email data, with guidance on detection and mitigation.

security: Cybersecurity IR Workshop: The workshop you shouldn’t miss

Microsoft Security Blog

2026-09-01

Microsoft Security blog post promoting a cybersecurity incident response workshop focused on preparedness and response. It says the workshop shares practical insights from DART to improve cyber resilience before a crisis.

August (2)

security: ​​​​​​What’s new in Microsoft Security: August 2026

Microsoft Security Blog

2026-08-27

Microsoft’s August 2026 security update highlights new capabilities for monitoring agent activity, broader security coverage across supported environments, and improved security management across environments.

security: The patch window is collapsing: Why security needs a new control plane

Microsoft Security Blog

2026-08-25

Microsoft Security says organizations need protection that works between vulnerability discovery and remediation, because the patch window is shrinking. The post argues for a new security control plane to cover that gap.