Ransomware - 1

2026 (1)

March (1)

security: Case study: How predictive shielding in Defender stopped GPO-based ransomware before it started

Microsoft Security Blog

2026-03-23

Microsoft Defender blocked a human-operated ransomware attack that used Group Policy Objects (GPOs) to disable defenses and deploy encryption at scale. Predictive shielding hardened 700 devices in time, preventing any GPO-based encryptions and blocking most of the attempted impact.

2025 (3)

November (1)

azure: [Launched] Generally Available: Azure SQL Database long-term retention (LTR) backup immutability

Azure Updates

2025-11-18

Azure SQL Database now generally supports immutability for long-term retention (LTR) backups. When immutability is enabled, LTR backups cannot be modified or deleted until their configured retention period expires, helping organizations meet compliance and protect backups from deletion or ransomware.

October (1)

security: Extortion and ransomware drive over half of cyberattacks

Microsoft Security Blog

2025-10-16

Microsoft reports that extortion and ransomware account for over half of cyberattacks; in 80% of incidents their security teams investigated last year attackers attempted to steal data, driven more by financial gain than intelligence gathering.

August (1)

security: Storm-0501’s evolving techniques lead to cloud-based ransomware

Microsoft Security Blog

2025-08-27

Microsoft reports that financially motivated threat actor Storm-0501 has shifted from deploying on-premises endpoint ransomware toward cloud-based ransomware tactics, increasingly focusing on cloud-specific TTPs after previously targeting hybrid cloud environments.