Latest threat reports & articles

microsoft_mstic · tlp:amber · 7/16/2026, 4:00:00 PM

Least privilege for AI agents: Identity, access, and tool binding As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure. The post Least privilege for AI agents: Identity, access, and tool binding appeared first on Microsoft Security Blog . In this article Real-world scenarios Best Practices: Identity + RBAC + Scope + Safe Tool Binding Looking Ahead AI agents aren’t only smarter API callers. They plan, c…

microsoft_mstic · tlp:amber · 7/16/2026, 1:36:21 AM

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This analysis breaks down the attack chain, payload delivery, and recommended defenses. The post Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery appeared first on Microsoft Security Blog . In this article Attack chain overview How the attac…

microsoft_mstic · tlp:amber · 7/15/2026, 4:00:35 PM

Turning threat intelligence into decisive action with Defender Experts Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints, identities, cloud workloads, and a sprawling mix of third-party tools. The post Turning threat intelligence into decisive action with Defender Experts appeared first on Microsoft Security Blog . In this article Upstream: See the campaign before it reaches you Microsoft Defender Threat …

microsoft_mstic · tlp:amber · 7/13/2026, 10:02:41 PM

Defending SaaS-based applications against ShinyHunters OAuth abuse Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications. The post Defending SaaS-based applications against ShinyHunters OAuth abuse appeared first on Microsoft Security Blog . In this article Attack chain overv…

microsoft_mstic · tlp:amber · 7/13/2026, 5:00:00 PM

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentication. Read about how to prepare. The post Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID appeared first on Microsoft Security Blog . As identity attacks grow more sophisticated in the AI era, organizations need st…

microsoft_mstic · tlp:amber · 7/10/2026, 4:00:00 PM

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready cybersecurity. The post Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative appeared first on Microsoft Security Blog . Security is never finished. That conviction is where the Secure Future Initiative (SFI) started two y…

microsoft_mstic · tlp:amber · 7/9/2026, 3:00:00 PM

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platform. This blog analyzes how the malware incorporates code from several previously separate malware families and provides guidance to help defenders detect and defend against similar threats. The post GigaWiper: Anatomy of a destructive backdoor assembled from multiple mal…

microsoft_mstic · tlp:amber · 7/8/2026, 5:00:00 PM

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Future Initiative (SFI), to guide what a well-defended cloud service looks like. But defining the requirements is only the start. Meeting the requirements means continuously evaluating our live services against them, at AI speed. The post Protecting Microsoft at AI speed: How SFI p…

microsoft_mstic · tlp:amber · 7/6/2026, 4:00:00 PM

5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management Read five key learnings from the Frost & Sullivan 2025 Frost Radar™ for CSPM to learn how CSPM is evolving from point-in-time compliance to continuous risk management. The post 5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management appeared first on Microsoft Security Blog . Cloud security posture management (CSPM) is being redefined as two…

microsoft_mstic · tlp:amber · 7/2/2026, 4:00:00 PM

Improving security posture across the Microsoft partner ecosystem Read how Microsoft strengthens partner ecosystem security with CSP vetting, least privilege access, monitoring, and risk management best practices. The post Improving security posture across the Microsoft partner ecosystem appeared first on Microsoft Security Blog . The Deputy CISO blog series is where  Microsoft   Deputy Chief Information Security Officers   (CISOs) share their thoughts o…

microsoft_mstic · tlp:amber · 7/1/2026, 4:00:00 PM

Microsoft named a leader in the Frost Radar for cloud and application runtime security Frost & Sullivan names Microsoft a leader as cloud and application security converge into unified, runtime risk reduction. The post Microsoft named a leader in the Frost Radar for cloud and application runtime security appeared first on Microsoft Security Blog . Cloud security is shifting from visibility to contextual risk reduction, extending into the applications, APIs, and workloa…

microsoft_mstic · tlp:amber · 6/30/2026, 7:00:00 PM

Accelerating the quantum-safe timeline We’re accelerating quantum-safe readiness—and sharing what organizations can do now to transition earlier and with confidence. The post Accelerating the quantum-safe timeline appeared first on Microsoft Security Blog . The quantum-safe timeline has changed For years, planning for post-quantum cryptography (PQC) was framed as a future problem: important, inevitable, but distant. That perspective is evolving as technology advances and or…

microsoft_mstic · tlp:amber · 6/30/2026, 4:00:00 PM

​​What’s new in Microsoft Security: June 2026 This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it lives, and secure the developer workflows powering AI innovation. The post ​​What’s new in Microsoft Security: June 2026 appeared first on Microsoft Security Blog . As organizations scale AI and agents across environments, security teams need protection that covers every surface. The Microsoft vision is simple…

microsoft_mstic · tlp:amber · 6/30/2026, 3:57:11 PM

Securing AI agents: When AI tools move from reading to acting MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool descriptions to trigger unauthorized actions, and how to detect, contain, and prevent it. The post Securing AI agents: When AI tools move from reading to acting appeared first on Microsoft Security Blog . In this article From reading to acting Attack pattern: MCP tool poisoning in a finance workf…

microsoft_mstic · tlp:amber · 6/29/2026, 4:27:46 PM

Chromium extension uses AI‑related branding to redirect browser search A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure. The post Chromium extension uses AI‑related branding to redirect browser search appeared first on Microsoft Security Blog . In this article Extension overview Key indicators of malicious behavior Dynamic analysis findings Mitigation a…

microsoft_mstic · tlp:amber · 6/25/2026, 10:30:29 PM

Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe and Asia. The campaign uses photo-themed ZIP archives and fake image shortcut files to deliver a persistent Node.js implant and evade detection. The post Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access app…

microsoft_mstic · tlp:amber · 6/25/2026, 4:00:00 PM

Microsoft a Leader in The Forrester Wave™ for Endpoint Management Platforms Microsoft named a Leader in the Forrester Wave™: Endpoint Management Platforms, Q2 2026, with the highest scores in the current offering and strategy categories. The post Microsoft a Leader in The Forrester Wave™ for Endpoint Management Platforms appeared first on Microsoft Security Blog . The endpoint management category is being redefined in real time. Organizations no longer need tools that only …

microsoft_mstic · tlp:amber · 6/24/2026, 6:00:00 PM

CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms Learn how CNAPP platforms are helping organizations prioritize exploitable risks, reduce exposure, and operationalize security across the application lifecycle. The post CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms appeared first on Microsoft Security Blog . Cloud security is shifting from visibility to context-aware risk reduction, helping security teams…

microsoft_mstic · tlp:amber · 6/24/2026, 12:30:00 PM

StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that formed the backbone of the StealC and Amadey infrastructure. This blog is a technical breakdown of StealC and Amadey. The post StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them appeared first on Microsoft Security Blog . …

microsoft_mstic · tlp:amber · 6/22/2026, 7:07:28 PM

Guarding AI memory What happens when threat actors target what AI remembers? Microsoft breaks down the risks and the defenses. The post Guarding AI memory appeared first on Microsoft Security Blog . In this article What AI memory is (and why it matters) What is an agent memory attack? How Microsoft approaches memory security in Microsoft 365 A guiding framework for building safe AI memory Key takeaways Learn more AI memory transforms an AI system from a stateless tool into …

microsoft_mstic · tlp:amber · 6/22/2026, 4:00:00 PM

One intrusion, two cyberattackers: Uncovering parallel threat activity Ransomware case reveals two parallel threat actors, blending tactics and evasion—showing why isolated signals can often miss modern, overlapping cyberattacks. The post One intrusion, two cyberattackers: Uncovering parallel threat activity appeared first on Microsoft Security Blog . What began as a routine ransomware investigation quickly revealed something far more complex. In this ninth cyberattack seri…

microsoft_mstic · tlp:amber · 6/19/2026, 12:17:54 AM

AutoJack: How a single page can RCE the host running your AI agent AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authentication, and unsafe parameter handling, attackers can trigger arbitrary process execution through AutoGen Studio’s MCP WebSocket. The research highlights a broader pattern - when agents can browse untrusted…

microsoft_mstic · tlp:amber · 6/18/2026, 7:36:08 PM

New Forrester study shows customers who unified with Microsoft Security benefited from 124% ROI New Forrester Total Economic Impact™ study shows Microsoft Security consolidation delivers ROI, lowers risk, and prepares organizations to secure AI. The post New Forrester study shows customers who unified with Microsoft Security benefited from 124% ROI appeared first on Microsoft Security Blog . Across many industries, organizations are unifying security and putting AI agents t…

microsoft_mstic · tlp:amber · 6/18/2026, 3:43:04 AM

From package to postinstall payload: Inside the Mastra npm supply chain compromise A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence. The post From package to postinstall payload: Inside the Mastra npm supply chain compromise appeared first on Microsoft Security Blog . In this article Attack chain overview Discove…

microsoft_mstic · tlp:amber · 6/17/2026, 11:11:43 PM

Crypto Clipper uses Tor and worm-like propagation for persistence and control Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, Tor-based communications, and worm-like propagation. Beyond stealing cryptocurrency transactions, the malware establishes persistent access and enables follow-on activity through a lightweight backdoor capability. The post Crypto Clipper uses Tor and worm-like propagation for …

microsoft_mstic · tlp:amber · 6/17/2026, 7:30:00 PM

Beyond the benchmark: Advancing security at AI speed Read how Microsoft Security has advanced its agentic vulnerability detection system, codename MDASH, integrating into real-world workflows across Windows, Azure, and identity systems. The post Beyond the benchmark: Advancing security at AI speed appeared first on Microsoft Security Blog . In this article From the lab into the pipeline This month’s set of discoveries Beyond the headline: What the engineering work taught us…

microsoft_mstic · tlp:amber · 6/17/2026, 6:30:00 PM

​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report Microsoft has been named a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026. The post ​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report appeared first on Microsoft Security Blog . We are excited to share that Microsoft has been named a Leader in The Forrester Wave™: Extended Detection a…

microsoft_mstic · tlp:amber · 6/17/2026, 5:00:00 PM

AI is accelerating cyberattacks—here’s how to stay ahead See how Microsoft unifies identity and security signals to help teams prevent, detect, and respond to AI-accelerated attacks faster. The post AI is accelerating cyberattacks—here’s how to stay ahead appeared first on Microsoft Security Blog . In March, we wrote that identity security has become  the new pressure point for modern cyberattacks . Since then, AI has only increased that pressure. AI helps cyberattacke…

microsoft_mstic · tlp:amber · 6/15/2026, 4:00:00 PM

Microsoft Defender email security benchmarking: Key insights from one year of data See how Microsoft Defender performed in one year of real-world email security benchmarking against SEG and ICES vendors. The post Microsoft Defender email security benchmarking: Key insights from one year of data appeared first on Microsoft Security Blog . Microsoft publishes quarterly email security benchmarking data comparing Microsoft Defender against secure email gateway (SEG) and integra…

microsoft_mstic · tlp:amber · 6/10/2026, 4:00:00 PM

Turn specs into evals for any agent with ASSERT Adaptive Spec-driven Scoring for Evaluation and Regression Testing (ASSERT) is an open-source framework for converting natural language behavior requirements into executable evaluations of AI models and agents. The post Turn specs into evals for any agent with ASSERT appeared first on Microsoft Security Blog . Today, we’re releasing Adaptive Spec-driven Scoring for Evaluation and Regression Testing (ASSERT) , an open-source fr…

microsoft_mstic · tlp:amber · 6/9/2026, 5:35:06 PM

Reconstructing AI activity in investigations Learn how to investigate AI activity in Microsoft 365 Copilot and Azure AI services using a structured, telemetry-driven approach. This playbook helps security teams reconstruct events, assess data exposure, and detect potential threats faster. The post Reconstructing AI activity in investigations appeared first on Microsoft Security Blog . AI systems are now part of everyday work. Investigators need a consistent way to reconstru…

microsoft_mstic · tlp:amber · 6/8/2026, 4:00:00 PM

AI brands as bait: How threat actors are using the AI hype in social engineering As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure. The post AI brands as bait: How threat actors are using the AI hype in social engineering appeared first on Microsoft Security Blog . In this article ChatGPT-themed lure leads to phishing kit collecting credit card data Claude-themed phishin…

microsoft_mstic · tlp:amber · 6/5/2026, 4:46:47 PM

Securing CI/CD in an agentic world: Claude Code Github action case Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to workflow secrets under specific conditions. This research examines the attack chain, responsible disclosure process, Anthropic's mitigation, and guidance for securing AI-powered CI/CD workflows. The post Securing CI/CD in an agentic world: Claude Code Github action case appeared first on Mic…

microsoft_mstic · tlp:amber · 6/4/2026, 7:14:42 PM

Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us A surge in real-world attacks against agentic AI systems is reshaping how we think about risk. Based on 12 months of red teaming, this update introduces seven new failure modes, from supply chain compromise to goal hijacking, and the practical mitigations teams need now. The post Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us …

microsoft_mstic · tlp:amber · 6/3/2026, 4:45:06 AM

Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign A large-scale npm supply chain attack compromised over 90 versions of @redhat-cloud-services packages, silently infecting CI/CD environments and developer systems. The malicious code steals credentials from GitHub, cloud platforms, and local machines, then spreads like a worm by republishing trusted packages. Discover how the attack works, what data is at risk, and the steps you can take to…

microsoft_mstic · tlp:amber · 6/2/2026, 5:15:18 PM

Microsoft Build 2026: Securing code, agents, and models across the development lifecycle Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. The post Microsoft Build 2026: Securing code, agents, and models across the development lifecycle appeared first on Microsoft Security Blog . In this article Secure your code Secure your agents Trust agents with your data Secure your models Trust starts with security Today, developers an…

microsoft_mstic · tlp:amber · 5/30/2026, 12:06:20 AM

Malicious npm packages abuse dependency confusion to profile developer environments A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and detection opportunities to help organizations identify and disrupt related activity. The post Malicious npm packages abuse dependency confusion to profile developer environments appeared first o…

microsoft_mstic · tlp:amber · 5/29/2026, 4:00:00 PM

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. The post Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection appeared first on Microsoft Security Blog . As threats become more coordinated and faster to execute, endpoint protection has become the proving ground for modern defense. For the seventh consecutive t…