Back to updates

Microsoft - 1

2026 (12)

September (6)

security: Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft Security Blog

2026-09-25

Microsoft describes Azure attacks linked to Storm-3168 using compromised service principals, including reconnaissance, resource deletion, and credential access. The post links the activity to JADEPUFFER and includes defender guidance.

security: Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Microsoft Security Blog

2026-09-24

Microsoft says Storm-2570 reuses the same post-compromise tools and techniques across multiple ransomware deployments, including Qilin, DragonForce, Anubis, and BERT. The post outlines guidance for defenders to detect and disrupt the activity before ransomware is deployed.

security: Unmasking EvilTokens: Getting to the root of device code phishing

Microsoft Security Blog

2026-09-22

Microsoft says it helped disrupt EvilTokens, a phishing-as-a-service platform used for device code phishing and token theft. The post describes AI-assisted lures, automated infrastructure, and Microsoft DCU’s role in the disruption.

security: Protecting organizations from AI-assisted executive impersonation and invoice fraud

Microsoft Security Blog

2026-09-10

Microsoft describes an AI-assisted business email compromise campaign that impersonated executives and used fake invoices to target finance teams for ACH payment fraud. The post focuses on the attack pattern and how organizations can protect against it.

commandline: PyRIT: Democratizing AI red teaming through open-source tooling

Microsoft Command Line Blog

2026-09-10

PyRIT is presented as an open-source Python tool for AI red teaming that lowers the barrier for subject matter experts to test generative AI systems. The article describes its evolution toward making red teaming more accessible across many domains.

security: Threat matrix: Mapping threats across cloud web applications

Microsoft Security Blog

2026-09-09

Microsoft introduced the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework for understanding and prioritizing threats against cloud-hosted web applications and serverless platforms. It is intended to help defenders map attacks and identify mitigations.

August (6)

commandline: Your agent’s guardrails have a bypass

Microsoft Command Line Blog

2026-08-27

Microsoft introduced Agent Hooks, an open, framework-neutral governance contract for agent systems. It includes conformance testing and is intended to make enforcement fail closed instead of failing open when controls crash.

security: When AI infrastructure becomes the target: Securing gateways and control points

Microsoft Security Blog

2026-08-26

Microsoft Threat Intelligence reports on attacks against exposed AI infrastructure, focusing on LiteLLM gateway exploitation and related credential theft, persistence, and cryptomining activity. The post highlights gateways and other control points as targets that need protection.

security: Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Microsoft Security Blog

2026-08-19

Microsoft says it was named a visionary leader in Frost & Sullivan’s 2026 Frost Radar for Cloud Workload Protection Platforms, citing Microsoft Defender for Cloud’s unified runtime security. The post is a brief recognition announcement with no product changes described.

dotnet: .NET 11 Preview 7 is now available!

.NET

2026-08-11

Microsoft announced .NET 11 Preview 7, covering updates across libraries, runtime, SDK, C#, ASP.NET Core, .NET MAUI, Entity Framework Core, F#, and Windows Forms. The provided excerpt does not include specific feature details.

github: MAI-Code-1.1-Flash available in GitHub Copilot

GitHub

2026-08-11

MAI-Code-1.1-Flash is rolling out in GitHub Copilot. It adds native vision support for image understanding and improves coding quality over MAI-Code-1-Flash.

security: Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise

Microsoft Security Blog

2026-08-10

Microsoft says it was named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise. The post highlights Microsoft Defender Experts MDR as combining AI, threat intelligence, and human expertise.