Microsoft - 4

2026 (6)

April (5)

security: SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

Microsoft Security Blog

2026-04-07

Microsoft says Forest Blizzard, a threat actor linked to the Russian military, is compromising insecure home and small-office routers and changing their settings to support malicious infrastructure. The activity includes DNS hijacking and adversary-in-the-middle attacks.

security: Inside an AI‑enabled device code phishing campaign

Microsoft Security Blog

2026-04-06

Microsoft describes a new device code phishing campaign that uses AI and end-to-end automation to generate live authentication codes on demand. The result is more scalable account compromise, higher success rates, and longer post-compromise access.

security: Threat actor abuse of AI accelerates from tool to cyberattack surface

Microsoft Security Blog

2026-04-02

Microsoft says threat actors are increasingly using generative AI to improve cyberattacks, including much higher phishing click-through rates and industrialized MFA bypass. The post frames AI as part of the attack surface, not just a tool attackers use.

security: Mitigating the Axios npm supply chain compromise

Microsoft Security Blog

2026-04-01

Microsoft reports that Axios was compromised in a March 31, 2026 npm supply chain attack. Two newly published version-update packages were used to download from command-and-control infrastructure, which Microsoft Threat Intelligence attributes to the North Korean actor Sapphire Sleet.

azure: Retirement: Select Azure AI Language Features

Azure Updates

2026-04-01

Microsoft will retire eight Azure AI Language features on March 20, 2027. The notice lists Key Phrase Extraction, Sentiment Analysis and Opinion Mining, Custom Text Classification, Conversational Language Understanding (CLU), Custom Question Answering (CQA), and other related language features.

March (1)

security: Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio

Microsoft Security Blog

2026-03-30

Microsoft published a security blog post mapping OWASP’s Top 10 risks for agentic applications to mitigations in Microsoft Copilot Studio. The article frames agentic AI as introducing new security risks and presents Copilot Studio as a way to address them.