2019–2026

2026 205

October 2026

1. 31 OctInside a malicious Claude Code-branded extension and its persistent SSH backdoor
2. 30 OctFrom help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
3. 29 OctTracking AI adoption in North Korean threat actor tradecraft
4. 29 OctIDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
5. 28 OctThe CISO’s evolving role: Protecting and defending in the agentic era
6. 23 OctInside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
7. 21 OctAI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
8. 19 OctAgents are your newest insiders. Security must move at their speed.
9. 16 OctManaging open-weight model risk in enterprise deployments
10. 14 OctThe hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
11. 8 OctPost-quantum authentication: Why organizations should start testing certificate ecosystems now
12. 7 Oct3 lessons from frontier AI vulnerability research
13. 6 OctCISO perspectives on managing vulnerability risks in the age of AI
14. 1 OctPreparing governments for an era of interconnected cyber risk
15. 1 OctInsights from the 2026 Microsoft Digital Defense Report

September 2026

1. 30 Sep​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
2. 30 SepUnauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
3. 29 SepPhishing Abuses RMM Tools for Persistent Access
4. 29 Sep​​Beyond source code: A path to the keys to the kingdom
5. 29 SepStar Blizzard refines phishing and malware delivery with the RedFlick technique
6. 28 SepNeedyMantis: Unpacking a post-compromise malware family used in targeted operations
7. 25 SepStorm-3168: Agentic-driven cloud attacks using compromised service principals
8. 24 SepBeyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
9. 24 Sep​​​​​​​​What’s new in Microsoft Security: September 2026​​
10. 23 SepReimagining the SOC for the agentic era in Microsoft Defender
11. 22 SepUnmasking EvilTokens: Getting to the root of device code phishing
12. 17 SepFrom guidance to action: Security fundamentals that materially reduce risk
13. 17 SepImproving email security outcomes with real-world Microsoft Defender insights
14. 10 SepProtecting organizations from AI-assisted executive impersonation and invoice fraud
15. 10 SepDetect and disrupt AI-themed attacks with Microsoft Defender
16. 9 SepThreat matrix: Mapping threats across cloud web applications
17. 9 SepPasskey-themed social engineering leads to identity and cloud compromise
18. 4 SepHow to secure edge AI in customer-owned environments
19. 3 SepASCII smuggling crosses over from AI prompt injection to phishing evasion
20. 2 SepImpersonating IT support: how threat actors turn a remote session into enterprise-wide access
21. 1 SepCounterfeit installers to system compromise: Tracking a deceptive software download campaign
22. 1 SepCybersecurity IR Workshop: The workshop you shouldn’t miss

August 2026

1. 29 AugTerminalFix campaign deploys a reverse tunnel through multistage intrusion
2. 27 Aug​​​​​​What’s new in Microsoft Security: August 2026
3. 26 AugWhen AI infrastructure becomes the target: Securing gateways and control points
4. 25 AugThe patch window is collapsing: Why security needs a new control plane
5. 19 AugMicrosoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026
6. 18 AugHunting MacSync Stealer infrastructure through behavioral pivots
7. 10 AugMicrosoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise
8. 10 AugDeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
9. 5 Aug​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)
10. 5 AugFrom open lures to cloaked gates: How a macOS ClickFix campaign learned to hide
11. 4 AugChainDrop supply chain compromise: Anatomy of a self-propagating worm
12. 4 AugAdvance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps
13. 4 Aug128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

July 2026

1. 31 JulCaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
2. 30 Jul​​​​What’s new in Microsoft Security: July 2026
3. 29 Jul​​Better security starts with better questions
4. 27 JulRethinking security for the age of AI
5. 27 JulEnhancing AI security through global AI red teaming
6. 23 JulEmail threat landscape: Q2 2026 trends and insights
7. 22 JulReal world incident response: Microsoft and AXA XL strengthen cyber resilience
8. 17 JulMicrosoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
9. 16 JulACR Stealer: Two observed intrusion chains amid increased threat activity
10. 16 JulLeast privilege for AI agents: Identity, access, and tool binding
11. 16 JulUnpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
12. 15 JulTurning threat intelligence into decisive action with Defender Experts
13. 13 JulDefending SaaS-based applications against ShinyHunters OAuth abuse
14. 13 JulMicrosoft Entra ID security updates: Passkeys are the default authentication method in Entra ID
15. 10 JulSecuring our future: July 2026 progress report on Microsoft’s Secure Future Initiative
16. 9 JulGigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
17. 8 JulProtecting Microsoft at AI speed: How SFI proactively hardens our cloud
18. 6 Jul5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management
19. 2 JulImproving security posture across the Microsoft partner ecosystem
20. 1 JulMicrosoft named a leader in the Frost Radar for cloud and application runtime security

June 2026

1. 30 JunAccelerating the quantum-safe timeline
2. 30 Jun​​What’s new in Microsoft Security: June 2026
3. 30 JunSecuring AI agents: When AI tools move from reading to acting
4. 29 JunChromium extension uses AI‑related branding to redirect browser search
5. 25 JunPhoto ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
6. 25 JunMicrosoft a Leader in The Forrester Wave™ for Endpoint Management Platforms
7. 24 JunCNAPP evolution: How Microsoft aligns with leading cloud risk management platforms
8. 24 JunStealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them
9. 22 JunGuarding AI memory
10. 22 JunOne intrusion, two cyberattackers: Uncovering parallel threat activity
11. 19 JunAutoJack: How a single page can RCE the host running your AI agent
12. 18 JunNew Forrester Total Economic Impact™ study projects a 124% ROI from unifying with Microsoft Security
13. 18 JunFrom package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
14. 17 JunCrypto Clipper uses Tor and worm-like propagation for persistence and control
15. 17 JunBeyond the benchmark: Advancing security at AI speed
16. 17 Jun​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report
17. 17 JunAI is accelerating cyberattacks—here’s how to stay ahead
18. 15 JunMicrosoft Defender email security benchmarking: Key insights from one year of data
19. 10 JunTurn specs into evals for any agent with ASSERT
20. 9 JunReconstructing AI activity in investigations
21. 8 JunAI brands as bait: How threat actors are using the AI hype in social engineering
22. 5 JunSecuring CI/CD in an agentic world: Claude Code Github action case
23. 4 JunUpdating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us
24. 3 JunPreinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign
25. 2 JunMicrosoft Build 2026: Securing code, agents, and models across the development lifecycle

May 2026

1. 30 MayMalicious npm packages abuse dependency confusion to profile developer environments
2. 29 MayMicrosoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection
3. 29 MayTyposquatted npm packages used to steal cloud and CI/CD secrets
4. 28 MayThe Gentlemen ransomware: Dissecting a self-propagating Go encryptor
5. 26 MayFrom poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
6. 22 MayMicrosoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms
7. 22 MayFrom edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
8. 22 MayMicrosoft Security success stories: How St. Luke’s and ManpowerGroup are securing AI foundations
9. 21 MayWhat’s new in Microsoft Security: May 2026
10. 20 MayMini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
11. 20 MaySecuring the gaming culture of cultures
12. 20 MayIntroducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow
13. 19 MayExposing Fox Tempest: A malware-signing service operation
14. 18 MayHow Storm-2949 turned a compromised identity into a cloud-wide breach
15. 18 MayHow to better protect your growing business in an AI-powered world
16. 14 MayDefense in depth for autonomous AI agents
17. 14 MayKazuar: Anatomy of a nation-state botnet
18. 14 MayWhen configuration becomes a vulnerability: Exploitable misconfigurations in AI apps
19. 12 MayAccelerating detection engineering using AI-assisted synthetic attack logs generation
20. 12 MayDefense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark
21. 12 MayDefending consumer web properties against modern DDoS attacks
22. 12 MayUndermining the trust boundary: Investigating a stealthy intrusion through third-party compromise
23. 8 MayActive attack: Dirty Frag Linux vulnerability expands post-compromise risk
24. 7 MayWhen prompts become shells: RCE vulnerabilities in AI agent frameworks
25. 7 MayWorld Passkey Day: Advancing passwordless authentication
26. 6 May​​Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report ​​
27. 6 MayClickFix campaign uses fake macOS utilities lures to deliver infostealers
28. 4 MayBreaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise
29. 2 MayCVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments
30. 1 MayMicrosoft Agent 365, now generally available, expands capabilities and integrations

April 2026

1. 30 AprWhat’s new, updated, or recently released in Microsoft Security
2. 30 AprEmail threat landscape: Q1 2026 trends and insights
3. 29 Apr8 best practices for CISOs conducting risk reviews
4. 28 AprSimplifying AWS defense with Microsoft Sentinel UEBA
5. 22 AprAI-powered defense for an AI-accelerated threat landscape
6. 21 AprDetection strategies across cloud and identities against infiltrating IT workers
7. 20 AprMaking opportunistic cyberattacks harder by design
8. 18 AprCross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook
9. 17 AprContaining a domain compromise: How predictive shielding shut down lateral movement
10. 16 AprBuilding your cryptographic inventory: A customer strategy for cryptographic posture management
11. 16 AprDissecting Sapphire Sleet’s macOS intrusion from lure to compromise
12. 15 AprIncident response for AI: Same fire, different fuel
13. 9 AprThe agentic SOC—Rethinking SecOps for the next decade
14. 9 AprInvestigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees
15. 9 AprIntent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk
16. 7 AprSOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks
17. 6 AprInside an AI‑enabled device code phishing campaign
18. 6 AprStorm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations
19. 2 AprThreat actor abuse of AI accelerates from tool to cyberattack surface
20. 2 AprCookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments
21. 1 AprMitigating the Axios npm supply chain compromise

March 2026

1. 31 MarThe threat to critical infrastructure has changed. Has your readiness?
2. 31 MarApplying security fundamentals to AI: Practical advice for CISOs
3. 31 MarWhatsApp malware campaign delivers VBScript and MSI backdoors
4. 30 MarAddressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio
5. 27 MarHow Microsoft Defender protects high-value assets in real-world attack scenarios
6. 25 MarIdentity security is the new pressure point for modern cyberattacks
7. 25 MarGuidance for detecting, investigating, and defending against the Trivy supply chain compromise
8. 23 MarCase study: How predictive shielding in Defender stopped GPO-based ransomware before it started
9. 20 MarCTI-REALM: A new benchmark for end-to-end detection rule generation with AI agents
10. 20 MarSecure agentic AI end-to-end
11. 19 MarNew tools and guidance: Announcing Zero Trust for AI
12. 19 MarWhen tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures
13. 18 MarObservability for AI Systems: Strengthening visibility for proactive risk detection
14. 16 MarHelp on the line: How a Microsoft Teams support call led to compromise
15. 12 MarStorm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft
16. 12 MarFrom transparency to action: What the latest Microsoft email security benchmark reveals
17. 12 MarDetecting and analyzing prompt abuse in AI tools
18. 11 MarContagious Interview: Malware delivered through fake developer job interviews
19. 9 MarSecure agentic AI for your Frontier Transformation
20. 6 MarAI as tradecraft: How threat actors operationalize AI
21. 5 MarWomen’s History Month: Encouraging women in cybersecurity at every career stage
22. 5 MarMalicious AI Assistant Extensions Harvest LLM Chat Histories
23. 4 MarInside Tycoon2FA: How a leading AiTM phishing kit operated at scale
24. 3 MarSigned malware impersonating workplace apps deploys RMM backdoors
25. 2 MarOAuth redirection abuse enables phishing and malware delivery

February 2026

1. 26 FebThreat modeling AI applications
2. 24 FebDeveloper-targeting campaign using malicious Next.js repositories
3. 24 FebScaling security operations with Microsoft Defender autonomous defense and expert-led services
4. 19 FebNew e-book: Establishing a proactive defense with Microsoft Security Exposure Management
5. 19 FebRunning OpenClaw safely: identity, isolation, and runtime risk
6. 17 FebUnify now or pay later: New research exposes the operational cost of a fragmented SOC
7. 12 FebDetecting and mitigating common agent misconfigurations
8. 12 FebYour complete guide to Microsoft experiences at RSAC™ 2026 Conference
9. 11 FebThe strategic SIEM buyer’s guide: Choosing an AI-ready platform for the agentic era
10. 10 Feb80% of Fortune 500 use active AI Agents: Observability, governance, and security shape the new frontier
11. 10 FebManipulating AI memory for profit: The rise of AI Recommendation Poisoning
12. 9 FebA one-prompt attack that breaks LLM safety alignment
13. 7 FebAnalysis of active exploitation of SolarWinds Web Help Desk
14. 5 FebNew Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan
15. 5 FebThe security implementation gap: Why Microsoft is supporting Operation Winter SHIELD
16. 4 FebDetecting backdoored language models at scale
17. 3 FebMicrosoft SDL: Evolving security practices for an AI-powered world
18. 2 FebInfostealers without borders: macOS, Python stealers, and platform abuse

January 2026

1. 30 JanCase study: Securing AI application supply chains
2. 29 JanTurning threat reports into detection insights with AI
3. 29 JanNew Microsoft Data Security Index report explores secure AI adoption to protect sensitive data
4. 27 JanMicrosoft announces the 2026 Security Excellence Awards winners
5. 26 JanSecurity strategies for safeguarding governmental data
6. 23 JanFrom runtime risk to real‑time defense: Securing AI agents
7. 22 JanMicrosoft Security success stories: Why integrated security is the foundation of AI transformation
8. 22 JanResurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint
9. 21 JanA new era of agents, a new era of posture
10. 20 JanFour priorities for AI-powered identity and network access security in 2026
11. 14 JanMicrosoft named a Leader in IDC MarketScape for Unified AI Governance Platforms
12. 14 JanInside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations
13. 13 JanHow Microsoft builds privacy and security to work hand-in-hand
14. 7 JanExplore the latest Microsoft Incident Response proactive services for enhanced resilience
15. 6 JanPhishing actors exploit complex routing and misconfigurations to spoof domains
16. 6 JanIntroducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services

2025 142

December 2025

1. 18 DecNew Microsoft e-book: 3 reasons point solutions are holding you back
2. 17 DecAccess Fabric: A modern approach to identity and network access
3. 15 DecDefending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components
4. 11 DecImposter for hire: How fake people can gain very real access
5. 10 DecFrom awareness to action: Building a security-first culture for the agentic AI era
6. 10 DecClarity in complexity: New insights for transparent email security
7. 9 DecShai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack
8. 9 DecChanging the physics of cyber defense
9. 8 DecStronger together: New Beazley collaboration enhances cyber resilience
10. 5 DecMicrosoft named a leader in the 2025 Gartner® Magic Quadrant™ for Email Security
11. 4 DecCybersecurity strategies to prioritize now​​
12. 2 DecHow to build forward-thinking cybersecurity teams for tomorrow

November 2025

1. 25 NovCharting the future of SOC: Human and AI collaboration for better security
2. 21 NovMicrosoft named a Leader in the Gartner® Magic Quadrant™ for Access Management for the ninth consecutive year
3. 18 NovAgents built into your workflow: Get Security Copilot with Microsoft 365 E5
4. 18 Nov​​Ambient and autonomous security for the agentic era​​
5. 10 Nov​​Securing our future: November 2025 progress report on Microsoft’s Secure Future Initiative ​​
6. 7 Nov​​Whisper Leak: A novel side-channel attack on remote language models
7. 6 NovNew IDC research highlights a major cloud security shift
8. 5 Nov​​Securing critical infrastructure: Why Europe’s risk-based regulations matter
9. 4 Nov​​Learn what generative AI can do for your security operations center
10. 3 NovSesameOp: Novel backdoor uses OpenAI Assistants API for command and control

October 2025

1. 30 OctThe 5 generative AI security threats you need to know about detailed in new e-book
2. 23 OctHarden your identity defense with improved protection, deeper correlation, and richer context
3. 22 OctThe CISO imperative: Building resilience in an era of accelerated cyberthreats
4. 21 OctThe new Microsoft Security Store unites partners and innovation
5. 20 OctInside the attack chain: Threat activity targeting Azure Blob Storage
6. 16 OctMicrosoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM
7. 16 OctExtortion and ransomware drive over half of cyberattacks
8. 15 OctThe importance of hardening customer support tools against cyberattacks
9. 14 OctMicrosoft raises the bar: A smarter way to measure AI for cybersecurity
10. 13 OctBuilding a lasting security culture at Microsoft
11. 9 OctSecuring agentic AI: Your guide to the Microsoft Ignite sessions catalog
12. 9 OctInvestigating targeted “payroll pirate” attacks affecting US universities
13. 7 OctDisrupting threats targeting Microsoft Teams
14. 7 OctNew Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security
15. 6 OctInside Microsoft Threat Intelligence: Calm in the chaos
16. 6 OctInvestigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability
17. 2 OctMicrosoft named a Leader in the IDC MarketScape for XDR
18. 1 OctCybersecurity Awareness Month: Security starts with you

September 2025

1. 30 SepEmpowering defenders in the era of agentic AI with Microsoft Sentinel
2. 25 SepIntroducing Microsoft Marketplace — Thousands of solutions. Millions of customers. One Marketplace.
3. 25 SepXCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory
4. 24 SepRetail at risk: How one alert uncovered a persistent cyberthreat​​
5. 24 SepAI vs. AI: Detecting an AI-obfuscated phishing campaign
6. 23 SepMicrosoft Purview delivered 30% reduction in data breach likelihood
7. 18 SepMicrosoft Defender delivered 242% return on investment over three years​​
8. 16 SepMicrosoft Purview innovations for your Fabric data: Unify data security and governance for the AI era
9. 5 SepAzure mandatory multifactor authentication: Phase 2 starting in October 2025

August 2025

1. 27 AugStorm-0501’s evolving techniques lead to cloud-based ransomware
2. 27 AugMicrosoft ranked number one in modern endpoint security market share third year in a row
3. 26 AugSecuring and governing the rise of autonomous agents​​
4. 21 AugThink before you Click(Fix): Analyzing the ClickFix social engineering technique
5. 20 AugQuantum-safe security: Progress towards next-generation cryptography
6. 18 AugDissecting PipeMagic: Inside the architecture of a modular backdoor framework
7. 13 AugConnect with the security community at Microsoft Ignite 2025
8. 12 AugDow’s 125-year legacy: Innovating with AI to secure a long future
9. 7 AugAnnouncing public preview: Phishing triage agent in Microsoft Defender
10. 6 AugSharing practical guidance: Launching Microsoft Secure Future Initiative (SFI) patterns and practices
11. 5 AugElevate your protection with expanded Microsoft Defender Experts coverage
12. 4 AugMicrosoft Entra Suite delivers 131% ROI by unifying identity and network access

July 2025

1. 31 JulModernize your identity defense with Microsoft Identity Threat Detection and Response
2. 31 JulFrozen in transit: Secret Blizzard’s AiTM campaign against diplomats
3. 28 JulSploitlight: Analyzing a Spotlight-based macOS TCC vulnerability
4. 22 JulDisrupting active exploitation of on-premises SharePoint vulnerabilities
5. 22 JulMicrosoft Sentinel data lake: Unify signals, cut costs, and power agentic AI
6. 17 JulTransparency on Microsoft Defender for Office 365 email security effectiveness
7. 16 JulMicrosoft is named a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
8. 16 JulProtecting customers from Octo Tempest attacks across multiple industries
9. 14 JulImproving IT efficiency with Microsoft Security Copilot in Microsoft Intune and Microsoft Entra
10. 10 Jul​​Forrester names Microsoft a Leader in the 2025 Zero Trust Platforms Wave™ report
11. 9 JulMicrosoft expands Zero Trust workshop to cover network, SecOps, and more
12. 8 JulEnhancing Microsoft 365 security by eliminating high-privilege access
13. 7 JulLearn how to build an AI-powered, unified SOC in new Microsoft e-book

June 2025

1. 30 JunJasper Sleet: North Korean remote IT workers’ evolving tactics to infiltrate organizations
2. 27 JunUnveiling RIFT: Enhancing Rust malware analysis through pattern matching
3. 26 JunBuilding security that lasts: Microsoft’s journey towards durability at scale ​​
4. 25 JunMicrosoft Named a Leader in the 2025 IDC CNAPP MarketScape: Key Takeaways for Security Buyers
5. 24 JunMicrosoft is named a Leader in The Forrester Wave™: Security Analytics Platforms, 2025​​
6. 23 JunNavigating cyber risks with Microsoft Security Exposure Management eBook
7. 12 JunCyber resilience begins before the crisis
8. 5 JunMeet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 3
9. 3 JunHow Microsoft Defender for Endpoint is redefining endpoint security
10. 2 JunDiscover how automatic attack disruption protects critical assets while ensuring business continuity
11. 2 JunAnnouncing a new strategic collaboration to bring clarity to threat actor naming

May 2025

1. 29 MayDefending against evolving identity attack techniques
2. 29 MayHow to deploy AI safely
3. 27 MayThe future of AI agents—and why OAuth must evolve
4. 27 MayNew Russia-affiliated actor Void Blizzard targets critical sectors for espionage
5. 21 MayLumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer
6. 19 MayMicrosoft extends Zero Trust to secure the agentic workforce
7. 15 May​​How the Microsoft Secure Future Initiative brings Zero Trust to life
8. 12 MayMarbled Dust leverages zero-day in Output Messenger for regional espionage
9. 7 MayMeet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2
10. 5 MayMicrosoft partners with Global Anti-Scam Alliance to fight cybercrime
11. 1 MayAnalyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape
12. 1 MayPushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins

April 2025

1. 29 AprMicrosoft announces the 2025 Security Excellence Awards winners
2. 28 AprFaster, more personalized service begins at the frontline with Microsoft Intune
3. 25 Apr​​Explore practical best practices to secure your data with Microsoft Purview​​
4. 24 AprNew whitepaper outlines the taxonomy of failure modes in AI agents
5. 23 AprUnderstanding the threat landscape for Kubernetes and containerized assets
6. 21 AprSecuring our future: April 2025 progress report on Microsoft’s Secure Future Initiative
7. 17 AprMicrosoft’s Secure by Design journey: One year of success
8. 16 AprCyber Signals Issue 9 | AI-powered deception: Emerging fraud threats and countermeasures
9. 15 AprThreat actors misuse Node.js to deliver malware and other malicious payloads
10. 15 Apr​​Transforming security​ with Microsoft Security Exposure Management initiatives​
11. 9 AprStopping attacks against on-premises Exchange Server and SharePoint Server with AMSI
12. 9 AprHow cyberattackers exploit domain controllers using ransomware
13. 8 AprExploitation of CLFS zero-day leads to ransomware activity
14. 8 AprMeet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity
15. 3 AprThreat actors leverage tax season to deploy tax-themed phishing campaigns
16. 1 AprTransforming public sector security operations in the AI era

March 2025

1. 31 MarAnalyzing open-source bootloaders: Finding vulnerabilities faster with AI
2. 31 MarNew innovations in Microsoft Purview for protected, AI-ready data
3. 27 MarUS Department of Labor’s journey to Zero Trust security with Microsoft Entra ID
4. 24 MarMicrosoft unveils Microsoft Security Copilot agents and new protections for AI
5. 17 MarStilachiRAT analysis: From system reconnaissance to cryptocurrency theft
6. 13 MarHow MSRC coordinates vulnerability research and disclosure while building community
7. 13 MarPhishing campaign impersonates Booking.com, delivers a suite of credential-stealing malware
8. 11 MarNew XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects
9. 6 MarWomen’s History Month: Why different perspectives in cybersecurity and AI matter more than ever before
10. 6 MarMalvertising campaign leads to info stealers hosted on GitHub
11. 5 MarSilk Typhoon targeting IT supply chain
12. 4 MarSecuring generative AI models on Azure AI Foundry

February 2025

1. 26 FebRethinking remote assistance security in a Zero Trust world
2. 20 FebMicrosoft at Legalweek: Help safeguard your AI future with Microsoft Purview​
3. 19 FebMicrosoft is named a Leader in the 2025 Gartner® Magic Quadrant™ for cyber-physical systems protection platforms​​
4. 18 Feb​​Join us for the end-to-end Microsoft RSAC 2025 Conference experience
5. 14 FebStorm-2372 conducts device code phishing campaign
6. 13 FebSecuring DeepSeek and other AI systems with Microsoft Security
7. 12 FebThe BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation
8. 10 FebBuild a stronger security strategy with proactive and reactive incident response: Cyberattack Series
9. 6 FebCode injection attacks using publicly disclosed ASP.NET machine keys
10. 3 FebHear from Microsoft Security experts at these top cybersecurity events in 2025

January 2025

1. 28 Jan3 priorities for adopting proactive identity and access security in 2025
2. 27 JanFast-track generative AI security with Microsoft Purview
3. 16 JanNew Star Blizzard spear-phishing campaign targets WhatsApp accounts
4. 15 JanInnovating in line with the European Union’s AI Act
5. 13 JanAnalyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions
6. 13 Jan3 takeaways from red teaming 100 generative AI products
7. 6 JanWhy security teams rely on Microsoft Defender Experts for XDR for managed detection and response

2024 125

December 2024

1. 19 DecNew Microsoft guidance for the CISA Zero Trust Maturity Model
2. 18 DecFoundry study highlights the benefits of a unified security platform in new e-book
3. 17 DecMicrosoft Defender for Cloud named a Leader in Frost Radar™ for CNAPP for the second year in a row!
4. 16 DecAgile Business, agile security: How AI and Zero Trust work together
5. 12 DecConvincing a billion users to love passkeys: UX design insights from Microsoft to boost adoption and security
6. 11 DecMicrosoft Defender XDR demonstrates 100% detection coverage across all cyberattack stages in the 2024 MITRE ATT&CK® Evaluations: Enterprise​​
7. 11 DecFrequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine
8. 10 DecNew Microsoft Purview features help protect and govern your data in the era of AI
9. 5 DecWhy security leaders trust Microsoft Sentinel to modernize their SOC​​
10. 5 Dec​​8 years as a Leader in the Gartner® Magic Quadrant™ for Access Management​​
11. 4 DecFrequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage
12. 4 DecExplore new Microsoft Entra capabilities at Gartner® Identity & Access Management Summit 2024
13. 2 Dec​​Follow-up on Ignite with Ask Microsoft Anything: Microsoft Security edition​​

November 2024

1. 22 NovMicrosoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON
2. 19 NovAI innovations for a more secure future unveiled at Microsoft Ignite
3. 13 NovMicrosoft Data Security Index annual report highlights evolving generative AI security needs
4. 11 NovDoD Zero Trust Strategy proves security benchmark years ahead of schedule with Microsoft collaboration
5. 7 NovMore value, less risk: How to implement generative AI across the organization securely and responsibly
6. 6 Nov​​Zero Trust Workshop: Advance your knowledge with an online resource
7. 4 NovHow Microsoft Defender for Office 365 innovated to address QR code phishing attacks

October 2024

1. 31 OctChinese threat actor Storm-0940 uses credentials from password spray attacks from a covert network
2. 31 Oct​​Microsoft now a Leader in three major analyst reports for SIEM
3. 31 Oct​​7 cybersecurity trends and tips for small and medium businesses to stay protected
4. 30 OctMicrosoft Ignite: Sessions and demos to improve your security strategy
5. 29 OctMidnight Blizzard conducts large-scale spear-phishing campaign using RDP files
6. 22 OctMicrosoft Threat Intelligence healthcare ransomware report highlights need for collective industry action
7. 17 OctNew macOS vulnerability, “HM Surf”, could lead to unauthorized data access
8. 15 OctEscalating cyber threats demand stronger global defense and cooperation
9. 11 OctMicrosoft’s guidance to help mitigate Kerberoasting
10. 10 Oct​​Cyber Signals Issue 8 | Education under siege: How cybercriminals target our schools​​
11. 8 OctFile hosting services misused for identity phishing
12. 7 OctMicrosoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI study
13. 1 OctCybersecurity Awareness Month: Securing our world—together

September 2024

1. 26 SepStorm-0501: Ransomware attacks expanding to hybrid cloud environments
2. 25 Sep​​Microsoft is named a Leader in the 2024 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
3. 25 SepActivate your data responsibly in the era of AI with Microsoft Purview
4. 24 SepMicrosoft Trustworthy AI: Unlocking human potential starts with trust
5. 23 Sep​​Securing our future: September 2024 progress update on Microsoft’s Secure Future Initiative (SFI)
6. 19 SepJoin us at Microsoft Ignite 2024 and learn to build a security-first culture with AI
7. 18 SepHow comprehensive security simplifies the defense of your digital estate

August 2024

1. 30 AugNorth Korean threat actor Citrine Sleet exploiting Chromium zero-day
2. 28 AugThe art and science behind Microsoft threat hunting: Part 3
3. 28 AugPeach Sandstorm deploys new custom Tickler malware in long-running intelligence gathering operations
4. 26 AugHow Microsoft Entra ID supports US government agencies in meeting identity security requirements
5. 22 AugMicrosoft AI Tour: Hear the latest product innovations to elevate your security strategy
6. 21 AugMicrosoft again ranked number one in modern endpoint security market share
7. 8 AugChained for attack: OpenVPN vulnerabilities discovered leading to RCE and LPE
8. 6 AugHow Microsoft and NIST are collaborating to advance the Zero Trust Implementation

July 2024

1. 30 JulNew Microsoft whitepaper shares how to prepare your data for secure AI adoption
2. 29 JulRansomware operators exploit ESXi hypervisor vulnerability for mass encryption
3. 27 JulWindows Security best practices for integrating and managing security tools
4. 25 JulOnyx Sleet uses array of malware to gather intelligence for North Korea
5. 24 JulZero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture
6. 17 JulConnect with Microsoft Security at Black Hat USA 2024​​
7. 16 JulMicrosoft Purview Data Governance will be generally available September 1, 2024
8. 11 JulSimplified Zero Trust security with the Microsoft Entra Suite and unified security operations platform, now generally available
9. 2 JulVulnerabilities in PanelView Plus devices could lead to remote code execution

June 2024

1. 26 JunMitigating Skeleton Key, a new type of generative AI jailbreak technique
2. 26 JunWorking with a cybersecurity committee of the board
3. 25 JunHow to boost your incident response readiness
4. 18 JunMicrosoft Defender Experts for XDR recognized in the latest MITRE Engenuity ATT&CK® Evaluation for Managed Services
5. 12 JunMicrosoft Incident Response tips for managing a mass password reset
6. 12 JunHow to achieve cloud-native endpoint management with Microsoft Intune
7. 4 JunAI jailbreaks: What they are and how they can be mitigated
8. 4 JunThe four stages of creating a trust fabric with identity and network security
9. 3 JunMicrosoft is named a leader in the Forrester Wave for XDR

May 2024

1. 30 MayExposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices
2. 29 May6 insights from Microsoft’s 2024 state of multicloud risk report to evolve your security strategy
3. 28 MayMoonstone Sleet emerges as new North Korean threat actor with new bag of tricks
4. 23 MayCyber Signals: Inside the growing risk of gift card fraud
5. 20 MayNew Windows 11 features strengthen security to address evolving cyberthreat landscape
6. 15 MayThreat actors misusing Quick Assist in social engineering attacks leading to ransomware
7. 13 MayMicrosoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​
8. 8 MayHow implementing a trust fabric strengthens identity and network
9. 7 MayMicrosoft announces the 2024 Microsoft Security Excellence Awards winners
10. 6 MayNew capabilities to help you secure your AI transformation
11. 3 MaySecurity above all else—expanding Microsoft’s Secure Future Initiative
12. 2 MayMicrosoft named an overall leader in KuppingerCole Leadership Compass for ITDR
13. 2 MayMicrosoft introduces passkeys for consumer accounts
14. 1 May“Dirty stream” attack: Discovering and mitigating a common vulnerability pattern in Android apps

April 2024

1. 25 Apr​​Investigating industrial control systems using Microsoft’s ICSpector open-source framework
2. 24 Apr5 ways a CNAPP can strengthen your multicloud security environment
3. 23 AprNew Microsoft Incident Response guide helps simplify cyberthreat investigations
4. 22 AprAnalyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials
5. 17 AprAttackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters
6. 16 AprNew Microsoft guidance for the DoD Zero Trust Strategy
7. 15 Apr​​Microsoft recognized as a Leader in the Forrester Wave™: Workforce Identity Platform, Q1 2024
8. 11 AprHow Microsoft discovers and mitigates evolving attacks against AI guardrails
9. 4 AprExplore Microsoft’s AI innovations at RSA Conference 2024
10. 3 AprGet end-to-end protection with Microsoft’s unified security operations platform, now in public preview
11. 2 AprMicrosoft Priva announces new solutions to help modernize your privacy program

March 2024

1. 26 MarThe foundation for responsible analytics with Microsoft Purview
2. 25 Mar​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024
3. 21 MarHow Microsoft Incident Response and Microsoft Defender for Identity work together to detect and respond to cyberthreats
4. 20 MarMicrosoft Threat Intelligence unveils targets and innovative tactics amidst tax season
5. 19 MarMicrosoft Sentinel delivered 234% ROI, according to new Forrester study
6. 18 MarMicrosoft Copilot for Security: General Availability details
7. 14 Mar​​Microsoft named as a Leader in three IDC MarketScapes for Modern Endpoint Security 2024
8. 13 MarMicrosoft Copilot for Security is generally available on April 1, 2024, with new capabilities
9. 8 MarInternational Women’s Day: Expanding cybersecurity opportunities in the era of AI
10. 7 MarEvolving Microsoft Security Development Lifecycle (SDL): How continuous SDL can help you build more secure software
11. 6 MarEnhancing protection: Updates on Microsoft’s Secure Future Initiative
12. 5 Mar​​Secure SaaS applications with Valence Security and Microsoft Security​​
13. 4 MarMicrosoft Secure: Learn expert AI strategy at our online event
14. 4 MarDefend against human-operated ransomware attacks with Microsoft Copilot for Security​​

February 2024

1. 26 FebMicrosoft Copilot for Security: The great equalizer for government security
2. 22 FebAnnouncing Microsoft’s open automation framework to red team generative AI Systems
3. 21 FebGet the most out of Microsoft Copilot for Security with good prompt engineering
4. 20 FebNavigating NIS2 requirements with Microsoft Security solutions
5. 14 FebStaying ahead of threat actors in the age of AI
6. 14 FebCyber Signals: Navigating cyberthreats and strengthening defenses in the era of AI
7. 8 FebMicrosoft Copilot for Security provides immediate impact for the Microsoft Defender Experts team
8. 6 FebMicrosoft Entra Verified ID introduces Face Check in preview
9. 1 FebConnect with Microsoft at these cybersecurity events in 2024
10. 1 Feb3 new ways the Microsoft Intune Suite offers security, simplification, and savings

January 2024

1. 29 JanJoin us at InfoSec Jupyterthon 2024
2. 29 JanBest practices in moving to cloud native endpoint management
3. 26 JanMidnight Blizzard: Guidance for responders on nation-state attack
4. 24 JanHow Datawiza uses Microsoft Entra ID to help universities simplify access
5. 18 JanMicrosoft at Legalweek: Secure data and gain efficiencies with Microsoft Purview eDiscovery enhanced by generative AI
6. 17 JanNew Microsoft Incident Response guides help security teams analyze suspicious activity
7. 17 JanNew TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs
8. 16 JanUnified security operations with Microsoft Sentinel and Microsoft Defender XDR
9. 12 JanMicrosoft is named a Leader in the 2023 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
10. 10 Jan5 ways to secure identity and access for 2024

2023 151

December 2023

1. 28 DecFinancially motivated threat actors misusing App Installer
2. 19 DecHow Strata Identity and Microsoft Entra ID solve identity challenges in mergers and acquisitions
3. 15 DecPatching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server
4. 12 DecThreat actors misuse OAuth applications to automate financially driven attacks
5. 12 DecStrengthening identity protection in the face of highly sophisticated attacks
6. 11 DecNew Microsoft Incident Response team guide shares best practices for security teams and leaders
7. 7 DecNew Microsoft Purview features use AI to help secure and govern all your data
8. 7 DecStar Blizzard increases sophistication and evasion in ongoing attacks
9. 6 DecMicrosoft Security Copilot drives new product integrations at Microsoft Ignite to empower security and IT teams
10. 5 DecMicrosoft Incident Response lessons on preventing cloud identity compromise
11. 5 Dec3 reasons why now is the time to go cloud native for device management
12. 4 DecProtecting credentials against social engineering: Cyberattack Series

November 2023

1. 28 NovForrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management
2. 22 NovDiamond Sleet supply chain compromise distributes a modified CyberLink installer
3. 21 NovMicrosoft named a Leader in 2023 Gartner® Magic Quadrant™ for Access Management for the 7th year​​
4. 21 NovSocial engineering attacks lure Indian users to install Android banking trojans
5. 15 NovMicrosoft unveils expansion of AI for security and security for AI at Microsoft Ignite
6. 9 NovMicrosoft shares threat intelligence at CYBERWARCON 2023
7. 8 NovInsights from Microsoft Security Copilot early adopters
8. 7 NovDigital security sessions at Microsoft Ignite to prepare you for the era of AI
9. 6 NovAutomatic Conditional Access policies in Microsoft Entra streamline identity protection
10. 2 NovAnnouncing Microsoft Secure Future Initiative to advance security engineering
11. 1 NovStarting your journey to become quantum-safe

October 2023

1. 31 OctFrom classroom to cyberfront: Unlocking the potential of the next generation of cyber defenders
2. 26 OctAn integrated incident response solution with Microsoft and PwC
3. 25 OctOcto Tempest crosses boundaries to facilitate extortion, encryption, and destruction
4. 25 OctTop insights and best practices from the new Microsoft Data Security Index report
5. 23 OctForrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report
6. 19 OctMicrosoft Security Copilot Early Access Program: Harnessing generative AI to empower security teams
7. 18 OctMultiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability
8. 18 OctExpanding audit logging and retention within Microsoft Purview for increased security visibility
9. 11 OctAutomatic disruption of human-operated attacks through containment of compromised user accounts
10. 11 OctMicrosoft Defender for Endpoint now stops human-operated attacks on its own
11. 9 OctExpanded Microsoft Security Experts offerings provide comprehensive protection
12. 3 OctDefending new vectors: Threat actors attempt SQL Server to cloud lateral movement
13. 2 OctCelebrate 20 years of Cybersecurity Awareness Month with Microsoft and let’s secure our world together

September 2023

1. 28 SepJoin the new Microsoft Security experience at Microsoft Ignite 2023
2. 26 SepNew security features in Windows 11 protect users and empower IT
3. 21 SepNew Microsoft security tools to protect families and businesses
4. 20 SepMicrosoft 365 Defender demonstrates 100 percent protection coverage in the 2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise
5. 19 SepForrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report
6. 14 SepPeach Sandstorm password spray campaigns enable intelligence collection at high-value targets
7. 14 SepUncursing the ncurses: Memory corruption vulnerabilities found in library
8. 12 SepMalware distributor Storm-0324 facilitates ransomware access
9. 7 SepCloud storage security: What’s new in the threat matrix

August 2023

1. 31 AugNavigating privacy in a data-driven world with Microsoft Priva
2. 24 AugFlax Typhoon using legitimate software to quietly access Taiwanese organizations
3. 15 AugHow the Microsoft Incident Response team helps customers remediate threats
4. 11 AugMultiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS
5. 9 AugNew Microsoft Security innovations expand multicloud visibility and enhance multiplatform protection
6. 8 AugMicrosoft Purview data security mitigations for BazaCall and other human-operated data exfiltration attacks
7. 8 AugBoost identity protection with Axiad Cloud and Microsoft Entra ID
8. 7 AugAdopting guidance from the US National Cybersecurity Strategy to secure the Internet of Things
9. 7 AugMicrosoft AI Red Team building future of safer AI
10. 3 AugCyber Signals: Sporting events and venues draw cyberthreats at increasing rates
11. 2 AugMidnight Blizzard conducts targeted social engineering over Microsoft Teams
12. 1 AugMicrosoft Defender for Office 365 gets highest rating in SE Labs Enterprise Email Security Services test for Q1 2023

July 2023

1. 27 JulHow to connect with Microsoft Security at Black Hat USA 2023
2. 25 JulCryptojacking: Understanding and defending against cloud compute resource abuse
3. 25 JulHow to build stronger security teams
4. 24 JulNew Microsoft identity and data security capabilities to accelerate CMMC compliance for the Defense Industrial Base
5. 24 JulMicrosoft Defender Experts for XDR helps triage, investigate, and respond to cyberthreats
6. 19 Jul​​Expanding cloud logging to give customers deeper security visibility
7. 18 JulMicrosoft Inspire: Partner resources to prepare for the future of security with AI
8. 14 JulAnalysis of Storm-0558 techniques for unauthorized email access
9. 11 JulStorm-0978 attacks reveal financial and espionage motives
10. 11 JulMicrosoft Entra expands into Security Service Edge and Azure AD becomes Microsoft Entra ID
11. 10 JulMeet unprecedented security challenges by leveraging MXDR services
12. 6 JulThe five-day job: A BlackByte ransomware intrusion case study
13. 6 JulMicrosoft Defender for Endpoint is ranked number one in market share in the IDC Worldwide Corporate Endpoint Security Market Shares report, 2022
14. 5 Jul11 best practices for securing data in cloud services

June 2023

1. 29 JunPatch me if you can: Cyberattack Series
2. 28 JunHow automation is evolving SecOps—and the real cost of cybercrime
3. 27 JunMicrosoft at NICE Conference: Resetting expectations and enabling diversity in the cybersecurity workforce
4. 26 JunWhy endpoint management is key to securing an AI-powered future
5. 22 JunIoT devices and Linux-based systems targeted by OpenSSH trojan campaign
6. 14 JunExpanding horizons—Microsoft Security’s continued commitment to multicloud
7. 14 JunCadet Blizzard emerges as a novel and distinct Russian threat actor
8. 14 JunPublic preview: Improve Win32 app security via app isolation
9. 13 JunHow Microsoft and Sonrai integrate to eliminate attack paths
10. 12 JunForrester names Microsoft a Leader in the 2023 Enterprise Email Security Wave
11. 8 JunDetecting and mitigating a multi-stage AiTM phishing and BEC campaign
12. 7 JunJoin our digital event to learn what’s new in Microsoft Entra
13. 6 JunWhy a proactive detection and incident response plan is crucial for your organization

May 2023

1. 31 MayXDR meets IAM: Comprehensive identity threat detection and response with Microsoft
2. 30 MayNew macOS vulnerability, Migraine, could bypass System Integrity Protection
3. 24 MayVolt Typhoon targets US critical infrastructure with living-off-the-land techniques
4. 23 MayMicrosoft Build 2023: Announcing new identity, compliance, and security features from Microsoft Security
5. 19 MayCyber Signals: Shifting tactics fuel surge in business email compromise
6. 15 MayMicrosoft Security highlights from RSA Conference 2023
7. 4 MayHow Microsoft can help you go passwordless this World Password Day
8. 3 MayForrester names Microsoft a Leader in 2023 Infrastructure-as-a-Service Platform Native Security report

April 2023

1. 27 AprWhy you should practice rollbacks to prevent data loss in a ransomware attack
2. 26 AprHealthy security habits to fight credential breaches: Cyberattack Series
3. 25 AprMicrosoft announces the 2023 Microsoft Security Excellence Awards winners
4. 24 AprStay compliant and protect sensitive data with Zero Trust security
5. 24 AprGetting started with the CDMC framework—Microsoft’s guide to cloud data management
6. 20 AprMicrosoft Entra delivers 240 percent ROI, according to new Forrester study
7. 19 AprSimplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation
8. 18 AprNation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets
9. 18 AprMicrosoft shifts to a new threat actor naming taxonomy
10. 17 AprProtect intellectual property with Govern 365 and Microsoft Purview
11. 17 AprSee product news and on-demand sessions from Microsoft Secure
12. 13 AprThreat actors strive to cause Tax Day headaches
13. 13 AprImprove supply chain security and resiliency with Microsoft
14. 12 AprLinkedIn and Microsoft Entra introduce a new way to verify your workplace
15. 11 AprGuidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign
16. 11 AprDEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia
17. 7 AprMERCURY and DEV-1084: Destructive attack on hybrid environment
18. 6 AprDevOps threat matrix
19. 6 AprSecure hybrid and remote workplaces with a Zero Trust approach
20. 4 AprDiscover a new era of security with Microsoft at RSAC 2023

March 2023

1. 30 MarLatest Microsoft Entra advancements strengthen identity security
2. 28 MarMicrosoft Secure: Explore innovations transforming the future of security
3. 27 MarMicrosoft Incident Response Retainer is generally available
4. 24 MarGuidance for investigating attacks using CVE-2023-23397
5. 23 MarMicrosoft continues to innovate to help secure small businesses
6. 22 MarThe next wave of multicloud security with Microsoft Defender for Cloud, a Cloud-Native Application Protection Platform (CNAPP)
7. 22 MarMicrosoft recognized as a Leader in The Forrester Wave™: Data Security Platforms, Q1 2023
8. 21 MarGain real-time identity protection with Microsoft and Recorded Future
9. 20 MarMicrosoft achieves first native Cloud Data Management Capabilities certification
10. 20 MarLeverage cloud-powered security with Microsoft Defender for IoT
11. 17 MarKillNet and affiliate hacktivist groups targeting healthcare with DDoS attacks
12. 16 MarJoin us at Microsoft Secure to discover the latest security solutions
13. 15 MarGain flexibility and scale with a cloud-native DLP solution
14. 13 MarDEV-1101 enables high-volume AiTM campaigns with open-source phishing kit
15. 8 MarInternational Women’s Day: The power of diversity to build stronger cybersecurity teams
16. 7 MarGet integrated Microsoft Purview Information Protection in Adobe Acrobat—now available
17. 6 MarProtecting Android clipboard content from unintended exposure
18. 2 MarMicrosoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
19. 2 MarNew research, tooling, and partnerships for more secure AI and machine learning
20. 1 MarSEC cyber risk management rule—a security and compliance opportunity
21. 1 MarThe Microsoft Intune Suite fuels cyber safety and IT efficiency

February 2023

1. 28 FebMicrosoft Security Experts discuss evolving threats in roundtable chat
2. 27 Feb5 reasons to adopt a Zero Trust security strategy for your business
3. 21 Feb2022 in review: DDoS attack trends and insights
4. 21 FebMicrosoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs
5. 16 FebCybersecurity health and how to stay ahead of attackers with Linda Grasso
6. 15 FebMicrosoft shifts to a comprehensive SaaS security solution
7. 14 FebAddressing cybersecurity at the board level with Difenda and Microsoft
8. 9 FebLearn what an AI-driven future means for cybersecurity at Microsoft Secure
9. 8 FebSolving one of NOBELIUM’s most novel attacks: Cyberattack Series
10. 6 FebIntroducing Adaptive Protection in Microsoft Purview—People-centric data protection for a multiplatform world
11. 2 FebMitigate risk by integrating threat modeling and DevOps processes

January 2023

1. 26 Jan2023 identity security trends and solutions from Microsoft
2. 26 JanIntroducing kernel sanitizers on Microsoft platforms
3. 25 JanMicrosoft Security reaches another milestone—Comprehensive, customer-centric solutions drive results
4. 23 JanMicrosoft Security innovations from 2022 to help you create a safer world today
5. 23 JanDigital event highlights new features in Microsoft Purview
6. 17 JanSecure your business like you secure your home: 5 steps to protect against cybercrime
7. 9 Jan​​Microsoft Entra: 5 identity priorities for 2023

2022 184

December 2022

1. 21 DecMicrosoft research uncovers new Zerobot capabilities
2. 20 DecMicrosoft Intune: 5 endpoint management predictions for 2023
3. 19 DecGatekeeper’s Achilles heel: Unearthing a macOS vulnerability
4. 19 DecHow to build a secure foundation for identity and access
5. 19 DecForrester names Microsoft a Leader in Q4 2022 Security Analytics Platforms Wave report
6. 15 DecMCCrash: Cross-platform DDoS botnet targets private Minecraft servers
7. 15 DecDo more with less with Microsoft Security—3 strategies to get you started
8. 14 DecCyber Signals: Risks to critical infrastructure on the rise
9. 13 Dec4 things to look for in a multicloud data protection solution
10. 12 DecIIS modules: The evolution of web shells and how to detect them
11. 7 DecMitigate threats with the new threat matrix for Kubernetes
12. 6 DecDEV-0139 launches targeted attacks against the cryptocurrency industry

November 2022

1. 30 NovImplementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra
2. 22 NovMicrosoft supports the DoD’s Zero Trust strategy
3. 22 NovJoin us at InfoSec Jupyterthon 2022
4. 22 NovVulnerable SDK components lead to supply chain risks in IoT and OT environments
5. 17 NovDEV-0569 finds new ways to deliver Royal ransomware, various payloads
6. 16 NovMicrosoft contributes S2C2F to OpenSSF to improve supply chain security
7. 16 NovToken tactics: How to prevent, detect, and respond to cloud token theft
8. 15 Nov2022 holiday DDoS protection guide
9. 10 NovMicrosoft threat intelligence presented at CyberWarCon 2022
10. 10 NovSimplify privacy protection with Microsoft Priva Subject Rights Requests
11. 9 NovMicrosoft Defender Experts for Hunting demonstrates industry-leading protection in the 2022 MITRE Engenuity ATT&CK® Evaluations for Managed Services
12. 4 NovMicrosoft named a Leader in 2022 Gartner® Magic Quadrant™ for Access Management for the 6th year
13. 3 NovStopping C2 communications in human-operated ransomware through network protection
14. 3 NovIdentifying cyberthreats quickly with proactive security testing
15. 2 NovMicrosoft Security tips for mitigating risk in mergers and acquisitions

October 2022

1. 31 OctThe door is open for anyone to become a cyber defender
2. 27 OctRaspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity
3. 27 OctDiscover Microsoft Security solutions for SLTT government grant readiness
4. 26 OctHow to prevent lateral movement attacks using Microsoft 365 Defender
5. 25 OctDEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector
6. 25 OctHow businesses are gaining integrated data protection with Microsoft Purview
7. 24 OctSecure your endpoints with Transparity and Microsoft
8. 21 OctSecuring IoT devices against attacks that target critical infrastructure
9. 19 OctDo more with less—Discover the latest Microsoft Entra innovations
10. 18 OctDefenders beware: A case for post-ransomware investigations
11. 18 OctHow Microsoft Purview and Priva help simplify data protection
12. 14 OctNew “Prestige” ransomware impacts organizations in Ukraine and Poland
13. 13 OctMicrosoft named a Leader in the 2022 Gartner® Magic Quadrant™ for Security Information and Event Management
14. 12 OctIntroducing new Microsoft Defender for Cloud innovations to strengthen cloud-native protections
15. 12 Oct5 cybersecurity capabilities announced at Microsoft Ignite 2022 to help you secure more with less
16. 6 OctMicrosoft publishes new report on holistic insider risk management
17. 5 OctDetecting and preventing LSASS credential dumping attacks
18. 4 OctCybersecurity awareness tips from Microsoft to empower your team to #BeCyberSmart
19. 1 OctAnalyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082

September 2022

1. 29 SepHow one product manager builds community at Microsoft Security
2. 29 SepZINC weaponizing open-source software
3. 29 SepCSO perspective: Why a strong IAM strategy is key to an organization’s cybersecurity approach
4. 22 SepMalicious OAuth applications abuse cloud email services to spread spam
5. 21 SepRewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices
6. 21 SepThe art and science behind Microsoft threat hunting: Part 2
7. 20 SepNew Windows 11 security features are designed for hybrid work
8. 15 SepTest your team’s security readiness with the Gone Phishing Tournament
9. 14 SepImplementing a Zero Trust strategy after compromise recovery
10. 8 SepThe art and science behind Microsoft threat hunting: Part 1
11. 8 SepMicrosoft investigates Iranian attacks against the Albanian government
12. 7 SepProfiling DEV-0270: PHOSPHORUS’ ransomware operations
13. 7 SepOne Microsoft manager’s entrepreneurial vision for multicloud identity and access

August 2022

1. 31 AugVulnerability in TikTok Android app could lead to one-click account hijacking
2. 31 AugStop Ransomware with Microsoft Security digital event presents threat intelligence in action
3. 30 AugCyber Signals: 3 strategies for protection against ransomware
4. 25 AugMERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations
5. 25 AugMicrosoft Security highlights from Black Hat USA 2022
6. 24 AugMagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone
7. 24 AugLooking for the ‘Sliver’ lining: Hunting for emerging command-and-control frameworks
8. 24 AugData governance: 5 tips for holistic data protection
9. 23 AugA multidimensional approach to journalism security
10. 22 AugMicrosoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools
11. 22 AugCyber Signals: Defend against the new ransomware landscape
12. 19 AugUncovering a ChromeOS remote memory corruption vulnerability
13. 18 AugHardware-based threat defense against increasingly complex cryptojackers
14. 18 AugConnect with Microsoft Security experts at the 2022 Gartner Identity & Access Management Summit
15. 15 AugDisrupting SEABORGIUM’s ongoing phishing operations
16. 8 AugIT security: An opportunity to raise corporate governance scores
17. 4 AugHow IT and security teams can work together to improve endpoint security
18. 3 AugMicrosoft Defender Experts for Hunting proactively hunts threats
19. 2 AugMicrosoft announces new solutions for threat intelligence and attack surface management

July 2022

1. 28 JulIndustrial systems: What it takes to secure and staff them
2. 27 JulUntangling KNOTWEED: European private-sector offensive actor using 0-day exploits
3. 26 JulMalicious IIS extensions quietly open persistent backdoors into servers
4. 26 JulHow one Microsoft product manager acts as champion for identity security
5. 25 JulDiscover 5 lessons Microsoft has learned about compliance management
6. 20 JulHow Microsoft Purview and Priva support the partner ecosystem
7. 19 JulHow Microsoft Security partners are helping customers do more with less
8. 14 JulNorth Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware
9. 13 JulMicrosoft recognized as a Leader in UEM Software 2022 IDC MarketScape reports
10. 13 JulUncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706
11. 12 JulFrom cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud
12. 11 JulIntroducing security for unmanaged devices in the Enterprise network with Microsoft Defender for IoT
13. 7 JulKuppingerCole rates Microsoft as outstanding in functionality for secure collaboration
14. 5 JulHive ransomware gets upgrades in Rust

June 2022

1. 30 JunToll fraud malware: How an Android application can drain your wallet
2. 30 JunUsing process creation properties to catch evasion techniques
3. 29 JunMicrosoft at RSA 2022: Envisioning the future of security
4. 28 JunHow security leaders can help their teams avoid burnout
5. 27 Jun4 breakthrough ideas for compliance and data security
6. 23 JunDetecting malicious key extractions by compromised identities for Azure Cosmos DB
7. 22 JunMicrosoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test
8. 21 JunImproving AI-based defenses to disrupt human-operated ransomware
9. 21 JunSecuring your IoT with Edge Secured-core devices
10. 20 JunHow one Microsoft software engineer works to improve access management
11. 16 JunMaking the world a safer place with Microsoft Defender for individuals
12. 15 JunWhy strong security solutions are critical to privacy protection
13. 13 JunThe many lives of BlackCat ransomware
14. 13 Jun5 ways to connect with Microsoft Security at Identiverse 2022
15. 6 JunAnnouncing 2022 Microsoft Security Excellence Awards winners
16. 2 JunExposing POLONIUM activity and infrastructure targeting Israeli organizations
17. 2 JunMicrosoft collaborates with Tenable to support federal cybersecurity efforts
18. 1 JunUsing Python to unearth a goldmine of threat intelligence from leaked chat logs

May 2022

1. 31 MaySecure access for a connected world—meet Microsoft Entra
2. 31 MayStreamlining employee onboarding: Microsoft’s response to the Great Reshuffle
3. 27 MayAndroid apps with millions of downloads exposed to high-severity vulnerabilities
4. 25 MayDetecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)
5. 23 MayAnatomy of a DDoS amplification attack
6. 23 MayHow to improve risk management using Zero Trust architecture
7. 23 MayBeneath the surface: Uncovering the shift in web skimming
8. 19 MayRise in XorDdos: A deeper look at the stealthy DDoS malware targeting Linux devices
9. 18 MaySo you want to be a CISO: What you should know about data protection
10. 17 MayEasy authentication and authorization in Azure Active Directory with No-Code Datawiza
11. 17 MayIn hot pursuit of ‘cryware’: Defending hot wallets from attacks
12. 16 MayMicrosoft showcases the future of comprehensive security at RSA 2022
13. 11 MayCenter for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK® matrix evaluation for defenders
14. 10 MayMicrosoft security experts outline next steps after compromise recovery
15. 9 MayRansomware as a service: Understanding the cybercrime gig economy and how to protect yourself
16. 9 MayBuilding a safer world together with our partners—introducing Microsoft Security Experts
17. 5 MayThis World Password Day consider ditching passwords altogether
18. 4 MayHow a senior product manager is leading the passwordless movement at Microsoft
19. 3 MayAutomating your Microsoft security suite with D3 Smart SOAR
20. 2 MayMicrosoft launches Defender for Business to help protect small and medium businesses

April 2022

1. 27 AprHow one senior developer brings the startup spirit to Microsoft
2. 26 AprMicrosoft finds new elevation of privilege Linux vulnerability, Nimbuspwn
3. 25 AprMicrosoft best practices for managing IoT security concerns
4. 21 AprDiscover the anatomy of an external cyberattack surface with new RiskIQ report
5. 19 AprThe future of compliance and data governance is here: Introducing Microsoft Purview
6. 14 AprA clearer lens on Zero Trust security strategy: Part 1
7. 13 AprDismantling ZLoader: How malicious ads led to disabled security tools and ransomware
8. 12 AprTarrask malware uses scheduled tasks for defense evasion
9. 11 AprLearn the latest cybersecurity techniques at the Microsoft Security Summit
10. 6 AprForrester names Microsoft a Leader in 2022 Enterprise Detection and Response Wave™ report
11. 6 AprMicrosoft 365 Defender demonstrates industry-leading protection in the 2022 MITRE Engenuity ATT&CK® Evaluations
12. 5 AprNew security features for Windows 11 will help protect hybrid work
13. 5 AprSpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965
14. 4 AprMicrosoft CRSP shares the ways human behavior affects compromise recovery

March 2022

1. 31 MarMicrosoft protects against human-operated ransomware across the full attack chain in the 2022 MITRE Engenuity ATT&CK® Evaluations
2. 31 Mar3 strategies to launch an effective data governance plan
3. 29 Mar3 steps to secure your multicloud and hybrid infrastructure with Azure Arc
4. 23 MarHow a leading Microsoft engineer extends culture to service resiliency
5. 22 MarDEV-0537 criminal actor targeting organizations for data exfiltration and destruction
6. 17 MarA Leader in multiple Zero Trust security categories: Industry analysts weigh in
7. 16 MarManage subject rights requests at scale with Microsoft Priva
8. 16 MarUncovering Trickbot’s use of IoT devices in command-and-control infrastructure
9. 15 MarWhat Generation Z can teach us about cybersecurity
10. 14 MarSecure your healthcare devices with Microsoft Defender for IoT and HCL’s CARE
11. 10 MarWhy decentralization is the future of digital identities
12. 8 Mar2.5 million-plus cybersecurity jobs are open—women can fill them
13. 3 MarSecure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™
14. 1 MarMicrosoft shares 4 challenges of protecting sensitive data and how to overcome them

February 2022

1. 28 FebHow Microsoft can help reduce insider risk during the Great Reshuffle
2. 25 FebMSTICPy January 2022 hackathon highlights
3. 23 FebMicrosoft Security delivers new multicloud capabilities
4. 22 FebThe federal Zero Trust strategy and Microsoft’s deployment guidance for all
5. 17 FebUS Government sets forth Zero Trust architecture strategy and requirements
6. 17 Feb4 best practices to implement a comprehensive Zero Trust security approach
7. 16 Feb‘Ice phishing’ on the blockchain
8. 10 FebWhat’s Next in Security from Microsoft
9. 9 FebCybersecurity threats are always changing—staying on top of them is vital, getting ahead of them is paramount
10. 7 FebDetect active network reconnaissance with Microsoft Defender for Endpoint
11. 4 FebACTINIUM targets Ukrainian organizations
12. 3 FebCyber Signals: Defending against cyber threats with the latest research, insights, and trends
13. 2 FebThe evolution of a Mac trojan: UpdateAgent’s progression

January 2022

1. 28 JanGartner® names Microsoft a Leader in the 2022 Magic Quadrant™ for Enterprise Information Archiving
2. 28 JanBuild a privacy-resilient workplace with Microsoft Priva
3. 27 JanMeasure the effectiveness of your Microsoft security with AttackIQ
4. 27 JanDiscover 3 ways to take a holistic approach to data protection
5. 26 JanEvolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA
6. 25 JanHow CISOs are preparing to tackle 2022
7. 21 JanCelebrating 20 Years of Trustworthy Computing
8. 20 JanBuild a stronger cybersecurity team through diversity and training
9. 16 JanDestructive malware targeting Ukrainian organizations
10. 13 JanLearn about 4 approaches to comprehensive security that help leaders be fearless
11. 10 JanAlign your security and network teams to Zero Trust security demands
12. 10 JanNew macOS vulnerability, “powerdir,” could lead to unauthorized user data access
13. 4 JanWhat you need to know about how cryptography impacts your security strategy

2021 233

December 2021

1. 15 DecA report on NOBELIUM’s unprecedented nation-state attack
2. 14 DecYour guide to mobile digital forensics
3. 12 DecGuidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability
4. 9 DecBest practices for AI security risk management
5. 9 DecA closer look at Qakbot’s latest building blocks (and how to knock them down)
6. 8 DecNew research shows IoT and OT innovation is critical to business but comes with significant risks
7. 8 DecImprove kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center
8. 7 DecNew Secured-core servers are now available from the Microsoft ecosystem to help secure your infrastructure
9. 6 DecNICKEL targeting government organizations across Latin America and Europe
10. 2 DecStructured threat hunting: One way Microsoft Defender Experts for Hunting prioritizes customer defense
11. 2 DecBehind the unprecedented effort to protect customers against the NOBELIUM nation-state attack

November 2021

1. 29 NovHow Red Canary and Microsoft can help reduce your alert fatigue
2. 23 NovStay safe online this holiday shopping season with tips from Microsoft
3. 23 NovMVP Health Care secures member portal access with Microsoft Azure Active Directory B2C
4. 22 NovHow to investigate service provider trust chains in the cloud
5. 19 NovJoin us at InfoSec Jupyterthon 2021
6. 18 NovMicrosoft named a Leader in IDC MarketScape for Modern Endpoint Security for Enterprise and Small and Midsize Businesses
7. 18 NovMicrosoft unpacks comprehensive security at Gartner and Forrester virtual events
8. 18 NovIranian targeting of IT sector on the rise
9. 17 NovAdopting a Zero Trust approach throughout the lifecycle of data
10. 16 NovProtect against phishing with Attack Simulation Training in Microsoft Defender for Office 365
11. 16 NovThe importance of identity and Microsoft Azure Active Directory resilience
12. 16 NovEvolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021
13. 15 NovHow Open Systems uses Microsoft tools to improve security maturity
14. 15 NovAI-driven adaptive protection against human-operated ransomware
15. 11 NovHow to assess and improve the security culture of your business
16. 11 NovHTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks
17. 10 NovThe hunt for NOBELIUM, the most sophisticated nation-state attack in history
18. 9 NovMicrosoft is a 5-time Leader in the Gartner Magic Quadrant for Access Management
19. 9 NovMicrosoft is recognized as a Leader in the 2021 Forrester Wave for Unified Endpoint Management
20. 9 NovThreat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus
21. 8 NovLearn how Microsoft strengthens IoT and OT security with Zero Trust
22. 4 NovDiscover what’s new and gain technical expertise from MISA at Ignite
23. 3 NovEvolving Zero Trust—Lessons learned and emerging trends
24. 2 NovProtect your business with Microsoft Security’s comprehensive protection
25. 2 NovHow Microsoft Defender for IoT can secure your IoT devices

October 2021

1. 28 OctMicrosoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection
2. 27 OctNew insights on cybersecurity in the age of hybrid work
3. 26 OctProtect your business from password sprays with Microsoft DART recommendations
4. 25 OctMicrosoft Digital Defense Report shares new insights on nation-state attacks
5. 25 OctNOBELIUM targeting delegated administrative privileges to facilitate broader attacks
6. 21 OctHow Microsoft is partnering with vendors to provide Zero Trust solutions
7. 21 OctDefenders wanted—building the new cybersecurity professionals
8. 21 OctFranken-phish: TodayZoo built from other phishing kits
9. 20 OctNew Microsoft Sysmon report in VirusTotal improves security
10. 19 OctSimplifying the complex: Introducing Privacy Management for Microsoft 365
11. 18 OctMicrosoft achieves a Leader placement in Forrester Wave for XDR
12. 18 OctGet career advice from 7 inspiring leaders in cybersecurity
13. 14 OctarchTIS and Microsoft: Zero Trust information security for Microsoft Teams
14. 12 OctAzure network security helps reduce cost and risk according to Forrester TEI study
15. 11 OctHow cyberattacks are changing according to new Microsoft Digital Defense Report
16. 11 OctIran-linked DEV-0343 targeting defense, GIS, and maritime sectors
17. 6 OctMicrosoft’s 5 guiding principles for decentralized identities
18. 5 OctPractical tips on how to use application security testing and testing standards
19. 4 OctWindows 11 offers chip to cloud protection to meet the new security challenges of hybrid work
20. 4 Oct#BeCyberSmart: When we learn together, we’re more secure together

September 2021

1. 30 Sep3 key resources to accelerate your passwordless journey
2. 29 SepDefend against zero-day exploits with Microsoft Defender Application Guard
3. 28 SepHow nation-state attackers like NOBELIUM are changing cybersecurity
4. 28 SepA simpler, more integrated approach to data governance
5. 27 SepFoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor
6. 27 SepA guide to combatting human-operated ransomware: Part 2
7. 21 Sep3 trends shaping identity as the center of modern security
8. 21 SepCatching the big fish: Analyzing a large-scale phishing-as-a-service operation
9. 20 SepA guide to combatting human-operated ransomware: Part 1
10. 15 SepAnalyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability
11. 15 SepThe passwordless future is here for your Microsoft account
12. 13 SepAfternoon Cyber Tea: Learn how to stop misinformation threats from nation-state bad actors
13. 9 SepCombat attacks with security solutions from Trustwave and Microsoft
14. 9 SepWhy diversity is important for a strong cybersecurity team
15. 7 Sep3 steps to prevent and recover from ransomware
16. 2 SepA deep-dive into the SolarWinds Serv-U SSH vulnerability
17. 1 SepGet free DMARC visibility with Valimail Authenticate and Microsoft Office 365

August 2021

1. 31 AugMicrosoft a Leader in 2021 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools
2. 30 AugHow to prepare for CMMC compliance as a defense industrial base supplier using the Microsoft cloud
3. 26 AugWidespread credential phishing campaign abuses open redirector links
4. 25 AugCybersecurity’s next fight: How to protect employees from online harassment
5. 23 AugHow Vodafone Global Security Director creates an inclusive and secure workplace
6. 19 AugHow to proactively defend against Mozi IoT botnet
7. 19 AugAutomating security assessments using Cloud Katana
8. 18 AugTrend-spotting email techniques: How modern phishing emails hide in plain sight
9. 18 AugMigrating content from traditional SIEMs to Azure Sentinel
10. 17 AugMicrosoft and NIST collaborate on EO to drive Zero Trust adoption
11. 12 AugAttackers use Morse code, other encryption methods in evasive phishing campaign
12. 11 Aug7 ways to harden your environment against compromise
13. 10 AugHow security can keep media and sources safe
14. 5 AugSharing the first SimuLand dataset to expedite research and learn about adversary tradecraft
15. 4 AugSpotting brand impersonation with Swin transformers and Siamese neural networks
16. 3 AugHow to manage a side-by-side transition from your traditional SIEM to Azure Sentinel

July 2021

1. 29 JulWhen coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks
2. 29 JulAttack AI systems in Machine Learning Evasion Competition
3. 29 JulMicrosoft at Black Hat 2021: Sessions, bug bounty updates, product news, and more
4. 29 JulBazaCall: Phony call centers lead to exfiltration and ransomware
5. 28 JulZero Trust Adoption Report: How does your organization compare?
6. 27 JulCombing through the fuzz: Using fuzzy hashing and deep learning to counter malware detection evasion techniques
7. 22 JulHow to protect your CAD data files with MIP and HALOCAD
8. 22 JulA guide to balancing external threats and insider risk
9. 22 JulWhen coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure
10. 21 JulMicrosoft acquires CloudKnox Security to offer unified privileged access and cloud entitlement management
11. 21 JulThe evolution of a matrix: How ATT&CK for Containers was built
12. 15 JulProtecting customers from a private-sector offensive actor using 0-day exploits and DevilsTongue malware
13. 14 JulMicrosoft delivers comprehensive solution to battle rise in consent phishing emails
14. 14 JulMISA expands portfolio and looks ahead during Microsoft Inspire
15. 14 JulHow Microsoft Security empowers partners to build customer trust
16. 13 JulMicrosoft discovers threat actor targeting SolarWinds Serv-U software with 0-day exploit
17. 12 JulMicrosoft acquired RiskIQ to strengthen cybersecurity of digital transformation and hybrid work
18. 8 JulMicrosoft named a Visionary in the 2021 Gartner Magic Quadrant for SIEM for Azure Sentinel
19. 7 JulHow to build a privacy program the right way
20. 7 JulAccessibility and usability for all in Azure Sentinel
21. 6 JulPreparing for your migration from on-premises SIEM to Azure Sentinel

June 2021

1. 30 JunMicrosoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise
2. 30 JunThe critical role of Zero Trust in securing our world
3. 29 JunMITRE ATT&CK® mappings released for built-in Azure security controls
4. 25 JunEncouraging women to embrace their cybersecurity superpowers
5. 25 JunWindows 11 enables security by design from the chip to the cloud
6. 22 JunStrategies, tools, and frameworks for building an effective threat intelligence team
7. 18 JunMicrosoft announces recipients of academic grants for AI research on combating phishing
8. 17 JunImprove your threat detection and response with Microsoft and Wortell
9. 15 JunAfternoon Cyber Tea: Microsoft’s cybersecurity response to COVID-19
10. 14 JunBehind the scenes of business email compromise: Using cross-domain threat data to disrupt a large BEC campaign
11. 10 JunHow purple teams can embrace hacker culture to improve security
12. 9 JunCRSP: The emergency team fighting cyber attacks beside customers
13. 8 JunOptimize security with Azure Firewall solution for Azure Sentinel
14. 3 JunHart and Microsoft announce partnership to incorporate ElectionGuard
15. 3 JunAfternoon Cyber Tea: Cybersecurity challenged to meet diversity goals
16. 2 Junodix and Microsoft: Protecting users against malware attacks with free FileWall license
17. 2 JunPrivacy compliance for smart meter infrastructure with Microsoft Information Protection and Azure Purview
18. 2 JunMicrosoft acquires ReFirm Labs to enhance IoT security
19. 1 JunUnderstanding the threat landscape and risks of OT environments

May 2021

1. 28 MayBreaking down NOBELIUM’s latest early-stage toolset
2. 28 MayNew sophisticated email-based attack from NOBELIUM
3. 26 MayHow user experience is shaping verifiable credentials and identity
4. 26 MayBecoming resilient by understanding cybersecurity risks: Part 4—navigating current threats
5. 25 MayMicrosoft is a Leader in the 2021 Forrester Endpoint Security Software as a Service Wave
6. 24 MayResources for accelerating your Zero Trust journey
7. 24 MayMicrosoft recognized as a Leader in The Forrester Wave™: Unstructured Data Security Platforms, Q2 2021
8. 20 MayPhorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment
9. 20 MaySimuLand: Understand adversary tradecraft and improve detection strategies
10. 19 MayProtecting SAP applications with the new Azure Sentinel SAP threat monitoring solution
11. 19 MayForrester names Microsoft a Leader in The Forrester Wave™: Cloud Security Gateways, Q2 2021
12. 18 MayMitigate OT security threats with these best practices
13. 17 MayHow a positive hybrid work culture can help you to mitigate insider risk
14. 12 MaySecuring a new world of hybrid work: What to know and what to do
15. 12 MayHow to secure your hybrid work world with a Zero Trust approach
16. 11 MayThreat and Vulnerability Management now supports all major platforms
17. 11 MayGartner names Microsoft a Leader in the 2021 Endpoint Protection Platforms Magic Quadrant
18. 6 MayForrester names Microsoft a Leader in the 2021 Enterprise Email Security Wave
19. 6 MayBusiness email compromise campaign targets wide range of orgs with gift card scam
20. 6 MayBusiness email compromise: How Microsoft is combating this costly threat
21. 5 MayStopping Carbanak+FIN7: How Microsoft led in the MITRE Engenuity® ATT&CK® Evaluation
22. 5 MayHow to apply a Zero Trust approach to your IoT solutions
23. 3 MayAI security risk assessment using Counterfit

April 2021

1. 29 AprCenter for Threat-Informed Defense teams up with Microsoft, partners to build the ATT&CK® for Containers matrix
2. 27 AprMeet critical infrastructure security compliance requirements with Microsoft 365
3. 26 AprDefending against cryptojacking with Microsoft Defender for Endpoint and Intel TDT
4. 22 AprEvolving beyond password complexity as an identity strategy
5. 21 AprMITRE Engenuity ATT&CK® Evaluation proves Microsoft Defender for Endpoint stops advanced attacks across platforms
6. 19 AprAfternoon Cyber Tea: Cybersecurity has become a pillar of the business
7. 19 AprSurface expands its Secured-core portfolio with the new Surface Laptop 4 powered by AMD Ryzen™ Mobile Processors
8. 15 AprCyberMDX and Microsoft: Protecting life-saving medical devices
9. 13 AprHow far have we come? The evolution of securing identities
10. 13 AprSecure unmanaged devices with Microsoft Defender for Endpoint now
11. 9 AprInvestigating a unique “form” of email delivery for IcedID malware
12. 8 AprThreat matrix for storage services
13. 8 AprGamifying machine learning for stronger security and AI models
14. 5 AprMicrosoft Defender for Endpoint now supports Windows 10 on Arm devices
15. 5 AprProtect your business from email phishing with multi-factor authentication
16. 1 AprBlueVoyant optimizes customer security with Microsoft security services
17. 1 AprAutomating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

March 2021

1. 31 MarZero Trust: 7 adoption strategies from security leaders
2. 30 MarNew Security Signals study shows firmware attacks on the rise; here’s how Microsoft is working to help eliminate this entire class of threats
3. 29 MarHow to build a successful application security program
4. 26 MarSecuring our approach to domain fronting within Azure
5. 25 MarAnalyzing attacks taking advantage of the Exchange Server vulnerabilities
6. 24 MarHow one data scientist is pioneering techniques to detect security threats
7. 23 MarSecure containerized environments with updated threat matrix for Kubernetes
8. 22 MarMedius’ small IT team supports distributed workforce with Azure Active Directory
9. 18 MarAutomatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus
10. 15 Mar5 steps to enable your corporate SOC to rapidly detect and respond to IoT/OT threats
11. 12 MarProtecting on-premises Exchange Servers against recent attacks
12. 11 MarFinalists announced in second annual Microsoft Security 20/20 awards
13. 11 MarThe biggest challenges—and important role—of application security
14. 9 MarAzure LoLBins: Protecting against the dual use of virtual machine extensions
15. 8 MarInternational Women’s Day: How to support and grow women in cybersecurity
16. 4 MarA better cloud access security broker: Securing your SaaS cloud apps and services with Microsoft Cloud App Security
17. 4 MarGoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence
18. 3 MarXLM + AMSI: New runtime defense against Excel 4.0 macro malware
19. 3 MarCompliance joins Microsoft Intelligent Security Association (MISA)
20. 2 MarHAFNIUM targeting Exchange Servers with 0-day exploits
21. 2 MarIdentity at Microsoft Ignite: Strengthening Zero Trust defenses in the era of hybrid work
22. 2 MarMicrosoft brings advanced hardware security to Server and Edge with Secured-core
23. 2 Mar4 ways Microsoft is delivering security for all in a Zero Trust world
24. 2 MarMicrosoft unifies SIEM and XDR to help stop advanced attacks
25. 2 MarSecuring and governing data in a new hybrid work reality

February 2021

1. 25 FebMicrosoft open sources CodeQL queries used to hunt for Solorigate activity
2. 24 FebBecoming resilient by understanding cybersecurity risks: Part 3—a security pro’s perspective
3. 23 FebMicrosoft listed as a Representative Vendor in 2020 Gartner Market Guide for Insider Risk Management Solutions
4. 22 FebSecuring Azure datacenters with continuous IoT/OT monitoring
5. 22 FebWhat we like about Microsoft Defender for Endpoint
6. 18 FebForrester Consulting TEI Study: Azure Security Center delivers 219 percent ROI over 3 years and a payback of less than 6 months
7. 18 FebTurning the page on Solorigate and opening the next chapter for the security community
8. 17 Feb6 strategies to reduce cybersecurity alert fatigue in your SOC
9. 16 FebAfternoon Cyber Tea: Evaluating individual and organizational cyber risk in a pandemic
10. 11 FebA playbook for modernizing security operations
11. 11 FebWeb shell attacks continue to rise
12. 8 FebWhy threat protection is critical to your Zero Trust security strategy
13. 4 FebSophisticated cybersecurity threats demand collaborative, global response
14. 4 FebAutomating and operationalizing data protection with Dataguise and Microsoft Information Protection
15. 4 FebModernizing your network security strategy
16. 3 FebAfternoon Cyber Tea: Privacy, the pandemic, and protecting our cyber future
17. 1 FebRecent enhancements for Microsoft Power Platform governance
18. 1 FebWhat tracking an attacker email infrastructure tells us about persistent cybercriminal operations

January 2021

1. 28 JanWhy operational resilience will be key in 2021, and how this impacts cybersecurity
2. 28 JanZINC attacks against security researchers
3. 28 Jan5 identity priorities for 2021—strengthening security for the hybrid work era and beyond
4. 27 JanThe state of apps by Microsoft identity: Azure AD app gallery apps that made the most impact in 2020
5. 27 JanAnnouncing the general availability of Azure Defender for IoT
6. 27 JanProtecting multi-cloud environments with Azure Security Center
7. 27 JanMicrosoft surpasses $10 billion in security business revenue, more than 40 percent year-over-year growth
8. 25 JanHow companies are securing devices with Zero Trust practices
9. 25 JanIdentity governance: The power of “Why not?”
10. 21 JanBlue Cedar partners with Microsoft to combat BYOD issues
11. 21 JanThe dynamic duo: How to build a red and blue team to strengthen your cybersecurity, Part 2
12. 20 JanDeep dive into the Solorigate second-stage activation: From SUNBURST to TEARDROP and Raindrop
13. 19 JanUsing Zero Trust principles to protect against sophisticated attacks like Solorigate
14. 19 JanHow IT leaders are securing identities with Zero Trust
15. 14 JanSimplify compliance and manage risk with Microsoft Compliance Manager
16. 14 JanIncreasing resilience against Solorigate and other sophisticated attacks with Microsoft Defender
17. 13 JanAzure Active Directory empowers frontline workers with simplified and secure access
18. 11 JanNew Surface PCs enable virtualization-based security (VBS) by default to empower customers to do more, securely
19. 6 JanPrivacy breaches: Using Microsoft 365 Advanced Audit and Advanced eDiscovery to minimize impact
20. 5 JanThe dynamic duo: How to build a red and blue team to strengthen your cybersecurity, Part 1
21. 4 JanForcepoint and Microsoft: Risk-based access control for the remote workforce

2020 224

December 2020

1. 28 DecUsing Microsoft 365 Defender to protect against Solorigate
2. 21 DecAdvice for incident responders on recovery from systemic identity compromises
3. 18 DecAnalyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers
4. 17 DecCollaborative innovation on display in Microsoft’s insider risk management strategy
5. 17 DecA “quick wins” approach to securing Azure Active Directory and Office 365 and improving your security posture
6. 17 DecA breakthrough year for passwordless technology
7. 17 DecBecoming resilient by understanding cybersecurity risks: Part 2
8. 16 DecTerranova Security Gone Phishing Tournament reveals continued weak spot in cybersecurity
9. 15 DecEnsuring customers are protected from Solorigate
10. 14 DecSiemens USA CISO: 3 essentials to look for in a cloud provider
11. 10 DecNew cloud-native breadth threat protection capabilities in Azure Defender
12. 10 DecWidespread malware campaign seeks to silently inject ads into search results, affects multiple browsers
13. 9 DecBuilding a Zero Trust business plan
14. 9 DecEDR in block mode stops IcedID cold
15. 8 DecDigital Defense integrates with Microsoft to detect attacks missed by traditional endpoint security
16. 7 DecDeliver productive and seamless user experiences with Azure Active Directory
17. 3 DecUnderstanding influences shaping the cybersecurity landscape, enabling digital transformation, and helping to protect our planet
18. 3 DecManage, govern, and get more value out of your data with Azure Purview
19. 2 DecProtect your SQL Server on-premises, in Azure, and in multicloud
20. 1 DecAzure Sentinel achieves a Leader placement in Forrester Wave, with top ranking in Strategy

November 2020

1. 30 NovThreat actor leverages coin miner techniques to stay under the radar – here’s how to spot them
2. 30 NovZerologon is now detected by Microsoft Defender for Identity
3. 25 NovGo inside the new Azure Defender for IoT including CyberX
4. 24 NovMicrosoft Azure Active Directory again a “Leader” in Gartner Magic Quadrant for Access Management
5. 23 NovIoT security: how Microsoft protects Azure Datacenters
6. 19 NovModernize secure access for your on-premises resources with Zero Trust
7. 18 NovCyberattacks targeting health care must stop
8. 18 NovGartner names Microsoft a Leader in the 2020 Magic Quadrant for Cloud Access Security Brokers
9. 17 NovKey layers for developing a Smarter SOC with CyberProof-managed Microsoft Azure security services
10. 17 NovMeet the Microsoft Pluton processor – The security chip designed for the future of Windows PCs
11. 16 NovForrester TEI study: Azure Sentinel delivers 201 percent ROI over 3 years and a payback of less than 6 months
12. 12 NovSystem Management Mode deep dive: How SMM isolation hardens the platform
13. 11 NovEmpowering employees to securely work from anywhere with an internet-first model and Zero Trust
14. 10 NovExtend data loss prevention to your devices with Microsoft Endpoint Data Loss Prevention, now generally available
15. 5 NovMicrosoft recognized as a Leader in the 2020 Gartner Magic Quadrant for Enterprise Information Archiving

October 2020

1. 29 OctIt’s Cybersecurity Awareness Month and there is still a lot to do
2. 29 OctUnilever CISO on balancing business risks with cybersecurity
3. 28 OctBack to the future: What the Jericho Forum taught us about modern security
4. 22 OctCyberattacks against machine learning systems are more common than you think
5. 21 OctAddressing cybersecurity risk in industrial IoT and OT
6. 20 OctCISO Spotlight: How diversity of data (and people) defeats today’s cyber threats
7. 15 OctAnnouncing the Zero Trust Deployment Center
8. 15 OctCISO Stressbusters: 7 tips for weathering the cybersecurity storms
9. 14 OctSecurity Unlocked—A new podcast exploring the people and AI that power Microsoft Security solutions
10. 13 OctBecoming resilient by understanding cybersecurity risks: Part 1
11. 12 OctAdvanced protection for web applications in Azure with Radware’s Microsoft Security integration
12. 12 OctTrickbot disrupted
13. 8 OctSophisticated new Android malware marks the latest evolution of mobile ransomware
14. 7 OctBest practices for defending Azure Virtual Machines
15. 6 OctWhy we invite security researchers to hack Azure Sphere
16. 5 Oct3 ways Microsoft helps build cyber safety awareness for all
17. 5 OctWhy integrated phishing-attack training is reshaping cybersecurity—Microsoft Security

September 2020

1. 29 SepMicrosoft Advanced Compliance Solutions in Zero Trust Architecture
2. 29 SepMicrosoft Digital Defense Report 2020: Cyber Threat Sophistication on the Rise
3. 24 SepMicrosoft Security—detecting empires in the cloud
4. 24 SepMicrosoft Security: 6 tips for enabling people-centric cybersecurity with security training
5. 22 SepMicrosoft delivers unified SIEM and XDR to modernize security operations
6. 22 SepMicrosoft announces cloud innovation to simplify security, compliance, and identity
7. 22 SepIdentity at Microsoft Ignite: Rising to the challenges of secure remote access and employee productivity
8. 22 SepEnable secure remote work, address regulations and uncover new risks with Microsoft Compliance
9. 21 SepVectra and Microsoft join forces to step up detection and response
10. 16 SepIndustry-wide partnership on threat-informed defense improves security for all
11. 15 SepMicrosoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale
12. 14 SepMicrosoft Security: Use baseline default tools to accelerate your security career
13. 10 SepSTRONTIUM: Detecting new patterns in credential harvesting
14. 8 SepAccelerate your adoption of SIEM using Azure Sentinel and a new offer from Microsoft
15. 3 Sep3 ways Microsoft 365 can help you reduce helpdesk costs
16. 1 SepForce firmware code to be measured and attested by Secure Launch on Windows 10

August 2020

1. 31 AugMicrosoft Security: How to cultivate a diverse cybersecurity team
2. 31 AugMicrosoft Security: What cybersecurity skills do I need to become a CISO?
3. 27 AugMicrosoft Zero Trust deployment guide for your applications
4. 27 AugStopping Active Directory attacks and other post-exploitation behavior with AMSI and machine learning
5. 26 AugRethinking IoT/OT Security to Mitigate Cyberthreats
6. 26 AugHow can Microsoft Threat Protection help reduce the risk from phishing?
7. 25 AugHow to detect and mitigate phishing risks with Microsoft and Terranova Security
8. 24 AugHow do I implement a Zero Trust security model for my Microsoft remote workforce?
9. 24 AugMicrosoft and Corrata integrate to extend cloud app security to mobile endpoints
10. 20 AugTaking Transport Layer Security (TLS) to the next level with TLS 1.3
11. 20 AugGartner announces the 2020 Magic Quadrant for Unified Endpoint Management
12. 19 AugNew data from Microsoft shows how the pandemic is accelerating the digital transformation of cyber-security
13. 13 AugNew Forrester study shows customers who deploy Microsoft Azure AD benefit from 123% ROI.
14. 11 AugMicrosoft Office 365—Do you have a false sense of cloud security?
15. 6 AugHow to organize your security team: The evolution of cybersecurity roles and responsibilities
16. 6 AugZero Trust: From security option to business imperative overnight
17. 5 AugAfternoon Cyber Tea: Revisiting social engineering: The human threat to cybersecurity
18. 5 AugAssociate Microsoft and Pradeo to manage and secure Android Enterprise mobile devices
19. 4 AugCISO Stressbusters: 4 tips for running a highly effective security operation
20. 3 AugMicrosoft Joins Open Source Security Foundation

July 2020

1. 29 JulInside Microsoft 365 Defender: Solving cross-domain security incidents through the power of correlation analytics
2. 28 JulEmpower your analysts to reduce burnout in your security operations center
3. 27 JulGuiding principles of our identity strategy: staying ahead of evolving customer needs
4. 23 JulAfternoon Cyber Tea: Peak, Plateau, or Plummet? Cyber security trends that are here to stay and how to detect and recover from ransomware attacks
5. 23 JulSeeing the big picture: Deep learning-based fusion of behavior signals for threat detection
6. 21 JulPreventing data loss and mitigating risk in today’s remote work environment
7. 20 JulHello open source security! Managing risk with software composition analysis
8. 16 Jul5 cybersecurity paradigm shifts that will lead to more inclusive digital experiences
9. 15 JulPrevent and detect more identity-based attacks with Azure Active Directory
10. 15 JulCISO Stressbusters: 3 ways to share accountability for security risk management
11. 14 JulMicrosoft Intelligent Security Association expands to include managed security service providers
12. 9 JulMaking Azure Sentinel work for you
13. 9 JulInside Microsoft 365 Defender: Correlating and consolidating attacks into incidents
14. 8 JulIntroducing Kernel Data Protection, a new platform security technology for preventing data corruption
15. 8 JulProtecting your remote workforce from application-based attacks like consent phishing
16. 7 JulNew study shows customers save time, resources and improve security with Microsoft Cloud App Security
17. 2 JulThe world is your authentication and identity oyster
18. 2 JulAfternoon Cyber Tea: Cybersecurity & IoT: New risks and how to minimize them

June 2020

1. 30 JunThe psychology of social engineering—the “soft” side of cybercrime
2. 29 JunBest security, compliance, and privacy practices for the rapid deployment of publicly facing Microsoft Power Apps intake forms
3. 25 JunLessons learned from the Microsoft SOC—Part 3d: Zen and the art of threat hunting
4. 24 JunFeeling fatigued? Cloud-based SIEM relieves security team burnout
5. 24 JunDefending Exchange servers under attack
6. 23 JunCISO Stressbusters: 4 tips for getting the first 6 months right as a new CISO
7. 23 JunMicrosoft continues to extend security for all with mobile protection for Android
8. 22 JunMicrosoft acquires CyberX to accelerate and secure customers’ IoT deployments
9. 22 JunModernizing the security operations center to better secure a remote workforce
10. 18 JunBarracuda and Microsoft: Securing applications in public cloud
11. 18 JunInside Microsoft 365 Defender: Mapping attack chains from cloud to endpoint
12. 17 JunMoving to cloud-based SIEM: the cost advantage
13. 17 JunUEFI scanner brings Microsoft Defender ATP protection to a new level
14. 16 JunStay ahead of multi-cloud attacks with Azure Security Center
15. 16 JunExploiting a crisis: How cybercriminals behaved during the outbreak
16. 15 JunZero Trust—Part 1: Networking
17. 11 JunBarracuda and Microsoft: Removing security barriers to faster public cloud adoption
18. 11 JunBlue teams helping red teams: A tale of a process crash, PowerShell, and the MITRE ATT&CK evaluation
19. 11 JunWhat’s new in Microsoft 365 Compliance and Risk Management
20. 10 JunMisconfigured Kubeflow workloads are a security risk
21. 10 JunInside Microsoft 365 Defender: Attack modeling for finding and stopping lateral movement
22. 9 Jun11 security tips to help stay safe in the COVID-19 era

May 2020

1. 28 MayManaging cybersecurity like a business risk: Part 1—Modeling opportunities and threats
2. 28 May4 identity partnerships to help drive better security
3. 26 MayZero Trust Deployment Guide for devices
4. 26 MayZero Trust and its role in securing the new normal
5. 21 MayBuild support for open source in your organization
6. 20 MaySuccess in security: reining in entropy
7. 20 MayCybersecurity best practices to implement highly secured devices
8. 19 MayMicrosoft Build brings new innovations and capabilities to keep developers and customers secure
9. 18 MayOperational resilience in a remote work world
10. 14 MayOpen-sourcing new COVID-19 threat intelligence
11. 13 MaySecured-core PCs help customers stay ahead of advanced data theft
12. 13 MayEmpowering your remote workforce with end-user security awareness
13. 11 MayCISO stress-busters: post #1 overcoming obstacles
14. 8 MayMicrosoft researchers work with Intel Labs to explore new deep learning approaches for malware classification
15. 7 MayProtect your accounts with smarter ways to sign in on World Passwordless Day
16. 6 MayHow to gain 24/7 detection and response coverage with Microsoft Defender ATP
17. 5 MayCISO Series: Lessons learned from the Microsoft SOC—Part 3c: A day in the life part 2
18. 4 MayMitigating vulnerabilities in endpoint network stacks
19. 1 MayMicrosoft Threat Protection leads in real-world detection in MITRE ATT&CK evaluation

April 2020

1. 30 AprZero Trust Deployment Guide for Microsoft Azure Active Directory
2. 30 AprData governance matters now more than ever
3. 28 AprRansomware groups continue to target healthcare, critical services; here’s how to reduce risk
4. 28 AprManaging risk in today’s IoT landscape: not a one-and-done
5. 23 AprProtecting your organization against password spray attacks
6. 22 AprDefending the power grid against supply chain attacks: Part 3 – Risk management strategies for the utilities industry
7. 21 AprMITRE ATT&CK APT 29 evaluation proves Microsoft Threat Protection provides deeper end to end view of advanced threats
8. 20 AprNERC CIP Compliance in Azure vs. Azure Government cloud
9. 16 AprSecurity guidance for remote desktop adoption
10. 16 AprSecure the software development lifecycle with machine learning
11. 13 AprAfternoon Cyber Tea: Building operational resilience in a digital world
12. 9 AprEnable remote work while keeping cloud deployments secure
13. 8 AprMicrosoft shares new threat intelligence, security guidance during global crisis
14. 7 AprMobile security—the 60 percent problem
15. 6 AprProtecting your data and maintaining compliance in a remote work environment
16. 6 AprTurning collaboration and customer engagement up with a strong identity approach
17. 3 AprMicrosoft Defender ATP can help you secure your remote workforce
18. 2 AprFull Operational Shutdown—another cybercrime case from the Microsoft Detection and Response Team
19. 2 AprThreat matrix for Kubernetes
20. 2 AprZero Trust framework to enable remote work
21. 1 AprMicrosoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do

March 2020

1. 31 MarWelcoming a more diverse workforce into cybersecurity: expanding the pipeline
2. 31 MarMaking it easier for your remote workforce to securely access all the apps they need, from anywhere
3. 26 MarAlternative ways for security professionals and IT to achieve modern security controls in today’s unique remote work scenarios
4. 24 MarWelcoming and retaining diversity in cybersecurity
5. 23 MarDefending the power grid against supply chain attacks—Part 2: Securing hardware and software
6. 23 MarLatest Astaroth living-off-the-land attacks are even more invisible but not less observable
7. 20 MarProtecting against coronavirus themed phishing attacks
8. 19 MarWelcoming more women into cybersecurity: the power of mentorships
9. 18 MarForrester names Microsoft a Leader in 2020 Enterprise Detection and Response Wave
10. 17 MarSecured-core PCs: A brief showcase of chip-to-cloud security against kernel attacks
11. 12 MarWork remotely, stay secure—guidance for CISOs
12. 12 MarEmpower Firstline Workers with Azure AD and YubiKey passwordless authentication
13. 11 MarGuarding against supply chain attacks—Part 3: How software becomes compromised
14. 10 MarThreat hunting: Part 1—Why your SOC needs a proactive hunting team
15. 9 MarBehavioral blocking and containment: Transforming optics into protection
16. 9 MarReal-life cybercrime stories from DART, the Microsoft Detection and Response Team
17. 5 MarHuman-operated ransomware attacks: A preventable disaster
18. 5 MarIT executives prioritize Multi-Factor Authentication in 2020
19. 3 MarQuick wins—single sign-on (SSO) and Multi-Factor Authentication (MFA)
20. 2 MarMicrosoft identity acronyms—what do they mean and how do they relate to each other?

February 2020

1. 24 FebMISA expands with new members and new product additions
2. 24 FebAzure Sphere—Microsoft’s answer to escalating IoT threats—reaches general availability
3. 20 FebNew Microsoft Security innovations and partnerships
4. 20 FebMicrosoft Insider Risk Management and Communication Compliance in Microsoft 365 now generally available
5. 20 FebFree import of AWS CloudTrail logs through June 2020 and other exciting Azure Sentinel updates
6. 20 FebAzure Sentinel uncovers the real threats hidden in billions of low fidelity signals
7. 20 FebMicrosoft Threat Protection stops attack sprawl and auto-heals enterprise assets with built-in intelligence and automation
8. 19 FebUnifying security policy across all mobile form-factors with Wandera and Microsoft
9. 18 FebDefending the power grid against supply chain attacks—Part 1: The risk defined
10. 13 FebChanging the Monolith—Part 4: Quick tech wins for a cloud-first world
11. 13 FebMattress Firm deployed Azure Active Directory to securely connect Firstline Workers to their SaaS apps and to each other
12. 12 FebNERC CIP compliance in Azure
13. 12 FebBuilding on secure productivity
14. 10 FebAfternoon Cyber Tea—From threat intelligence to chatbots: A look at AI in cybersecurity
15. 6 FebVisionary security partners to be honored at the very first Microsoft Security 20/20 event
16. 4 FebGhost in the shell: Investigating web shell attacks
17. 4 FebRSA Conference 2020—Empower your defenders with artificial intelligence and automation
18. 3 FebGuarding against supply chain attacks—Part 2: Hardware risks
19. 3 FebNew capabilities for eDiscovery now available

January 2020

1. 30 JanChanging the Monolith—Part 3: What’s your process?
2. 29 JanCyber-risk assessments—the solution for companies in the Fourth Industrial Revolution
3. 29 JanAfternoon Cyber Tea—The State of Cybersecurity: How did we get here? What does it mean?
4. 28 Jan5 identity priorities for 2020
5. 28 JanData privacy is about more than compliance—it’s about being a good world citizen
6. 27 JanNew privacy assessments now included in Microsoft Compliance Score
7. 23 JanAzure Security Benchmark—90 security and compliance best practices for your workloads in Azure
8. 23 JanMicrosoft and Zscaler help organizations implement the Zero Trust model
9. 21 JansLoad launches version 2.0, Starslord
10. 20 JanHow companies can prepare for a heightened threat environment
11. 16 JanChanging the monolith—Part 2: Whose support do you need?
12. 16 JanIntroducing Microsoft Application Inspector
13. 15 JanHow to implement Multi-Factor Authentication (MFA)
14. 14 JanRethinking cyber scenarios—learning (and training) as you defend
15. 9 JanChanging the monolith—Part 1: Building alliances for a secure culture
16. 8 JanMicrosoft 365 helps governments adopt a Zero Trust security model
17. 7 JanThreat hunting in Azure Advanced Threat Protection (ATP)

2019 153

December 2019

1. 23 DecCISO series: Lessons learned from the Microsoft SOC—Part 3b: A day in the life
2. 19 DecMobile threat defense and intelligence are a core part of cyber defense
3. 18 DecData science for cybersecurity: A probabilistic time series model for detecting RDP inbound brute force attacks
4. 18 DecData governance and retention in your Microsoft 365 tenant—a secure and highly capable solution
5. 17 DecNorsk Hydro responds to ransomware attack with transparency
6. 17 DecHow to secure your IoT deployment during the security talent shortage
7. 16 DecRansomware response
8. 13 DecFinding a common language to describe AI security threats
9. 12 DecMulti-stage downloader Trojan sLoad abuses BITS almost exclusively for malicious activities
10. 12 DecGALLIUM: Targeting global telecom
11. 12 DecGo passwordless to strengthen security and reduce costs
12. 11 DecThe quiet evolution of phishing
13. 9 DecImprove cyber supply chain risk management with Microsoft Azure
14. 3 DecMicrosoft Security—a Leader in 5 Gartner Magic Quadrants
15. 2 DecSpear phishing campaigns—they’re sharper than you think

November 2019

1. 26 NovGartner Names Microsoft a Leader in the 2019 Enterprise Information Archiving (EIA) Magic Quadrant
2. 26 NovInsights from one year of tracking a polymorphic threat
3. 25 NovGoing in-depth on the Windows 10 random number generation infrastructure
4. 25 NovRethinking cyber learning—consider gamification
5. 14 NovChanging security incident response by utilizing the power of the cloud—DART tools, techniques, and procedures: part 1
6. 11 NovZero Trust strategy—what good looks like
7. 7 NovMicrosoft works with researchers to detect and protect against new RDP exploits
8. 6 NovMicrosoft Cloud Security solutions provide comprehensive cross-cloud protection
9. 5 NovThinking about the balance between compliance and security
10. 5 NovAzure Sentinel updates: Improve your security operations with innovations from a cloud-native SIEM
11. 5 NovMicrosoft Intelligent Security Association grows to more than 80 members
12. 4 NovFurther enhancing security from Microsoft, not just for Microsoft
13. 4 NovMicrosoft announces new innovations in security, compliance, and identity at Ignite

October 2019

1. 29 OctImprove security with a Zero Trust access model
2. 29 OctGartner names Microsoft a Leader in the 2019 Cloud Access Security Broker (CASB) Magic Quadrant
3. 28 OctExperts on demand: Your direct line to Microsoft security insight, guidance, and expertise
4. 28 OctIoT security will set innovation free: Azure Sphere general availability scheduled for February 2020
5. 23 OctTraditional perimeter-based network defense is obsolete—transform to a Zero Trust model
6. 21 OctMicrosoft and partners design new device security requirements to protect against targeted firmware attacks
7. 18 OctBest practices for adding layered security to Azure security with Check Point’s CloudGuard IaaS
8. 16 OctTop 6 email security best practices to protect against phishing attacks and business email compromise
9. 16 OctGuarding against supply chain attacks—Part 1: The big picture
10. 15 OctMicrosoft’s 4 principles for an effective security operations center
11. 9 OctPatching as a social responsibility
12. 8 OctHow to avoid getting caught in a “Groundhog Day” loop of security issues
13. 8 OctIn hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks
14. 7 OctCISO series: Lessons learned from the Microsoft SOC—Part 3a: Choosing SOC tools
15. 3 OctYour password doesn’t matter—but MFA does!
16. 1 OctForrester names Microsoft a Leader in 2019 Endpoint Security Suites Wave
17. 1 OctRethinking how we learn security

September 2019

1. 30 SepTLS version enforcement capabilities now available per certificate binding on Windows Server 2019
2. 26 SepBring your own LOLBin: Multi-stage, fileless Nodersok campaign delivers rare Node.js-based malware
3. 26 SepHow to prevent phishing attacks that target your customers with DMARC and Office 365
4. 25 SepTop 5 use cases to help you make the most of your Cloud Access Security Broker
5. 24 SepAzure Sentinel—the cloud-native SIEM that empowers defenders is now generally available
6. 23 SepMicrosoft is awarded Zscaler’s Technology Partner of the Year for 2019
7. 18 SepOverview of the Marsh-Microsoft 2019 Global Cyber Risk Perception survey results
8. 17 SepOperational resilience begins with your commitment to and investment in cyber resilience
9. 12 SepAre students prepared for real-world cyber curveballs?
10. 11 SepFoundations of Flow—secure and compliant automation, part 2
11. 9 SepAutomated incident response in Office 365 ATP now generally available
12. 5 SepFoundations of Microsoft Flow—secure and compliant automation, part 1
13. 3 SepDeep learning rises: New methods for detecting malicious PowerShell

August 2019

1. 29 AugBeyond the buzzwords
2. 27 AugImprove security and simplify operations with Windows Defender Antivirus + Morphisec
3. 23 AugGartner names Microsoft a Leader in 2019 Endpoint Protection Platforms Magic Quadrant
4. 20 AugOne simple action you can take to prevent 99.9 percent of attacks on your accounts
5. 8 AugFrom unstructured data to actionable intelligence: Using machine learning for threat intelligence
6. 8 AugProtect against BlueKeep
7. 7 AugA case study in industry collaboration: Poisoned RDP vulnerability disclosure and response

July 2019

1. 31 JulHow Windows Defender Antivirus integrates hardware-based system integrity for informed, extensive endpoint protection
2. 31 JulCISO series: Better cybersecurity requires a diverse and inclusive approach to AI and machine learning
3. 30 JulCouncil of EU Law Enforcement Protocol improves cross-border cooperation
4. 29 JulThe evolution of Microsoft Threat Protection—July update
5. 25 JulNew machine learning model sifts through the good to unearth the bad in evasive malware
6. 16 JulHow to cost-effectively manage and secure a mobile ecosystem
7. 15 JulFacing the cold chills
8. 11 JulPreparing your enterprise to eliminate passwords
9. 11 JulMicrosoft Intelligent Security Association welcomes members of the Microsoft Virus Initiative
10. 8 JulDismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack
11. 2 JulMicrosoft’s Threat & Vulnerability Management now helps thousands of customers to discover, prioritize, and remediate vulnerabilities in real time
12. 1 JulDelivering major enhancements in Windows Defender Application Control with the Windows 10 May 2019 Update

June 2019

1. 25 Jun3 strategies for building an information protection program
2. 24 Jun5 principles driving a customer-obsessed identity strategy at Microsoft
3. 24 JunInside out: Get to know the advanced technologies at the core of Microsoft Defender ATP next generation protection
4. 20 JunThe evolution of Microsoft Threat Protection, June update
5. 20 JunInvestigating identity threats in hybrid cloud environments
6. 17 JunHow to recover from a security breach
7. 12 JunEnsuring security of your Microsoft Teams apps with Microsoft Cloud App Security
8. 11 Jun4 best practices to help you integrate security into DevOps
9. 10 JunAdvancing Windows 10 as a passwordless platform
10. 6 JunCISO Series: Lessons learned from the Microsoft SOC Part 2b: Career paths and readiness
11. 4 JunStep 10. Detect and investigate security incidents: top 10 actions to secure your environment
12. 3 JunSecure your journey to the cloud with free DMARC monitoring for Office 365

May 2019

1. 30 MayDemystifying Password Hash Sync
2. 23 MayUncovering Linux based cyberattack using Azure Security Center
3. 23 MayUK launches cyberstrategy with long-term relevance
4. 23 MayNew browser extensions for integrating Microsoft’s hardware-based isolation
5. 21 MayStep 9. Protect your OS: top 10 actions to secure your environment
6. 16 MayOvum recommends Microsoft security to safeguard your hybrid and multi cloud environments
7. 15 MayAnnouncing the all new Attack Surface Analyzer 2.0
8. 15 MayDecentralized identity and the path to digital privacy
9. 14 MayExecuting on the vision of Microsoft Threat Protection
10. 9 MayDetecting credential theft through memory access modelling with Microsoft Defender ATP
11. 9 MaySafeguard your most sensitive data with Microsoft 365
12. 8 May3 investments Microsoft is making to improve identity management
13. 6 MayIdentity enhancements to support the more than 1 million active third-party applications on our platform
14. 6 MayDeveloping connected security solutions
15. 2 MayGet security beyond Microsoft products with Microsoft 365

April 2019

1. 30 AprUpdates for Microsoft 365 help strengthen data privacy
2. 29 AprUnderstand and improve your security posture with Microsoft 365
3. 25 AprThe evolution of Microsoft Threat Protection, April update
4. 23 AprCISO Series: Lessons learned from the Microsoft SOC—Part 2a: Organizing people
5. 17 AprDefend your digital landscape with Microsoft 365
6. 15 AprDiscover and manage shadow IT with Microsoft 365
7. 11 AprIntroducing the security configuration framework: A prioritized guide to hardening Windows 10
8. 10 AprForcepoint DLP integration with Microsoft Information Protection—protecting your critical data
9. 10 Apr4 tried-and-true prevention strategies for enterprise-level security
10. 10 AprBuilding the security operations center of tomorrow—better insights with compound detection
11. 10 AprAnalysis of a targeted attack exploiting the WinRAR CVE-2018-20250 vulnerability
12. 9 AprStep 8. Protect your documents and email: top 10 actions to secure your environment
13. 8 AprThe language of InfoSec
14. 5 AprSteer clear of tax scams
15. 3 AprSecure access to your enterprise with Microsoft 365
16. 3 AprAnnouncing new capabilities for the Microsoft Azure Security Center
17. 1 AprAnnouncing the Microsoft Graph Security Hackathon winners

March 2019

1. 26 MarStep 7. Discover shadow IT and take control of your cloud apps: top 10 actions to secure your environment
2. 26 MarDART: the Microsoft cybersecurity team we hope you never meet
3. 25 MarFrom alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw
4. 21 MarAnnouncing Microsoft Defender ATP for Mac and new Threat and Vulnerability Management capabilities
5. 18 Mar5 steps financial institutions can take to reduce their cybercrime risk
6. 14 MarThe evolution of Microsoft Threat Protection, RSA edition part 2
7. 14 MarThe evolution of Microsoft Threat Protection, RSA edition part 1
8. 12 MarStep 6. Manage mobile apps: top 10 actions to secure your environment
9. 6 MarSecuring your digital transformation
10. 4 MarHelping security professionals do more, better

February 2019

1. 28 FebMicrosoft Security Intelligence Report Volume 24 is now available
2. 28 FebAnnouncing Microsoft Threat Experts
3. 22 FebRecommendations for deploying the latest Attack surface reduction rules for maximum impact
4. 21 FebCISO Series: Lessons learned from the Microsoft SOC—Part 1: Organization
5. 21 FebWhy the Pipeline Cybersecurity Initiative is a critical step
6. 14 FebStep 5. Set up mobile device management: top 10 actions to secure your environment
7. 13 FebThe evolution of Microsoft Threat Protection, February update
8. 11 FebSolving the TLS 1.0 problem
9. 7 FebSecuring the future of AI and machine learning at Microsoft
10. 4 FebAnnouncing the new Security Engineering website
11. 1 FebDefending critical infrastructure is imperative

January 2019

1. 31 JanCISO series: Talking cybersecurity with the board of directors
2. 30 JanStep 4. Set conditional access policies: top 10 actions to secure your environment
3. 23 JanVoice of the Customer: Azure AD helps lululemon enable productivity and security all at once for its employees
4. 17 JanMicrosoft Defender ATP integrates with Microsoft Information Protection to discover, protect, and monitor sensitive data on Windows devices
5. 16 JanStep 3. Protect your identities: top 10 actions to secure your environment
6. 16 JanThe evolution of Microsoft Threat Protection, January update
7. 15 JanMicrosoft gains strong customer and analyst momentum in the Cloud Access Security Brokers (CASB) market
8. 10 JanBest practices for securely using Microsoft 365—the CIS Microsoft 365 Foundations Benchmark now available
9. 9 JanGuide to Developing a National Cybersecurity Strategy—a resource for policymakers to respond to cybersecurity challenges
10. 8 JanBe careful of data without context: The case of malware scanning of journaled emails
11. 2 JanTwo new Microsoft 365 offerings help address security and compliance needs