Threat Intelligence - 1

2026 (2)

January (2)

security: Turning threat reports into detection insights with AI

Microsoft Security Blog

2026-01-29

The Microsoft Security Blog describes an AI-assisted workflow that converts lengthy incident reports and threat writeups into actionable detections by automatically extracting TTPs, mapping them to existing detection coverage, and flagging gaps — completing in minutes instead of days while preserving human expert review.

security: Explore the latest Microsoft Incident Response proactive services for enhanced resilience

Microsoft Security Blog

2026-01-07

Microsoft Incident Response has introduced new proactive services that use expert‑led preparation and advanced intelligence to convert security uncertainty into operational readiness and improved organizational resilience.

2025 (3)

November (1)

azure: [Launched] Generally Available: DNS security policy Threat Intelligence feed

Azure Updates

2025-11-20

Azure DNS security policy Threat Intelligence feed is now generally available. It provides a Microsoft-managed threat intelligence feed to protect DNS queries by identifying and blocking known malicious domains, helping prevent attacks that begin with DNS resolution.

October (1)

security: Inside Microsoft Threat Intelligence: Calm in the chaos

Microsoft Security Blog

2025-10-06

Microsoft’s Incident Response team works effectively amid the disorder caused by fast-moving threat actors, treating compromised environments, missing data, and shaken confidence as the starting point for investigations, as described in the Microsoft Security Blog post "Inside Microsoft Threat Intelligence: Calm in the chaos."

September (1)

security: XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory

Microsoft Security Blog

2025-09-25

Microsoft Threat Intelligence has identified a new variant of the XCSSET malware that targets Xcode projects used by developers building Apple and macOS applications, detailed in a Microsoft Security Blog post.