Microsoft - 1

2026 (12)

November (7)

security: Trained to betray: How post-training supply chain attacks hijack coding agents

Microsoft Security Blog

2026-11-12

Microsoft describes how poisoned datasets and model checkpoints in the post-training supply chain can compromise coding agents, leading to remote code execution and other malicious behavior. The post is a security analysis from Defender Research and the AI Red Team.

visualstudio: Announcing Visual Studio 2026 LTSC 18.11

Visual Studio Blog

2026-11-10

Microsoft announced Visual Studio 2026 LTSC 18.11, released alongside Visual Studio 2026 18.12 on the Stable channel. LTSC 18.11 will now receive two years of support, through November 14, 2028, instead of the one year previously announced.

security: FORGE Lab uses agentic tools to identify memory safety issues in Rust

Microsoft Security Blog

2026-11-09

Microsoft FORGE Lab reported memory-safety bugs in Rust's core and std libraries, including cases where safe Rust code can lead to undefined behavior. The findings were made using Hyenas, FORGE's research version of codename MDASH, and focused on three patterns of misplaced trust in unsafe code.

dotnet: Help Shape the Future of .NET: Take the 2026 .NET Developer Survey

.NET

2026-11-05

Microsoft is asking .NET developers to complete the 2026 .NET Developer Survey to share experience, surface common challenges, and inform future .NET investment priorities. The survey is expected to take about 15 minutes.

security: Email threat landscape: Q3 2026 trends and insights

Microsoft Security Blog

2026-11-05

Microsoft Threat Intelligence reported a sharp rise in email-based phishing activity in Q3 2026, while QR code phishing declined. The post also noted a rebound in CAPTCHA-gated phishing and highlighted risks from malicious messages spoofing familiar business-service sender domains and security override behavior.

dotnet: Get Ready for .NET Conf 2026!

.NET

2026-11-03

The post announces that .NET Conf 2026 starts in one week, running November 10–13. It will include the launch of .NET 11, two days of Microsoft sessions, and two days of Community Days.

security: Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms

Microsoft Security Blog

2026-11-03

Microsoft says Gartner named it a Leader in the inaugural 2026 Magic Quadrant for AI Agent Management Platforms. The provided text does not include product changes, technical details, or release notes.

October (5)

security: Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft Security Blog

2026-10-31

Microsoft describes a malicious extension branded as Claude Code that installs a persistent SSH backdoor, and provides detection and remediation guidance. The post focuses on how the extension behaves and how to identify affected systems.

security: Tracking AI adoption in North Korean threat actor tradecraft

Microsoft Security Blog

2026-10-29

Microsoft Threat Intelligence reports that North Korean threat actors are increasingly using AI in their operations, with different levels of adoption across groups. The post describes how AI is being incorporated into attack chains to improve speed and efficiency.

security: IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

Microsoft Security Blog

2026-10-29

IDC named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises.

commandline: Building a fully autonomous meeting invite capability for Autopilot

Microsoft Command Line Blog

2026-10-24

Microsoft describes using the Microsoft-Decision-1 model to complete an autonomous meeting-invite capability for Autopilot. The article is a brief note and provides no implementation details beyond that.

security: AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Microsoft Security Blog

2026-10-21

Microsoft says Storm-0940 used ARTEX agentic AI to speed up a ConnectWise supply-chain compromise and then abuse application credentials in Microsoft 365 environments.