Since early 2026, Microsoft has tracked Russian state actor Star Blizzard using enhanced phishing and a new malware delivery method called RedFlick, improving their evasion capabilities.
Storm-2570 is a ransomware affiliate using consistent tools and techniques across multiple ransomware operations, posing detection and disruption challenges.
The EvilTokens phishing platform compromising over 12,000 Microsoft accounts across 10,000 organizations was disrupted through an operation led by Microsoft's Digital Crimes Unit, halting ongoing account takeovers.
Microsoft's September 2026 Patch Tuesday addresses 966 vulnerabilities including two actively exploited zero-day flaws.
Microsoft outlines strategies to secure edge AI assets in customer-owned environments, addressing challenges in verifying trusted systems before exposing sensitive data and AI models.
Microsoft highlights enforcing least privilege identity, access, and auditing controls to secure autonomous AI agents and prevent misuse.