Microsoft-Security - 1

2026 (9)

April (3)

security: Building your cryptographic inventory: A customer strategy for cryptographic posture management

Microsoft Security Blog

2026-04-16

The post outlines a customer approach to building a cryptographic inventory as part of cryptographic posture management and quantum-safe readiness. It references Microsoft Security tools, lifecycle best practices, and partner solutions.

security: Incident response for AI: Same fire, different fuel

Microsoft Security Blog

2026-04-15

Microsoft Security says AI incident response uses the same core IR lifecycle, but requires different telemetry, tools, and skills because AI systems change how incidents unfold.

security: Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

Microsoft Security Blog

2026-04-06

Microsoft says Storm-1175 is running fast-moving Medusa ransomware campaigns that exploit recently disclosed vulnerabilities in web-facing systems for initial access, data theft, and ransomware deployment. The actor uses Medusa ransomware, also referred to as Gaze.exe.

March (2)

security: The threat to critical infrastructure has changed. Has your readiness?

Microsoft Security Blog

2026-03-31

Microsoft says critical infrastructure threat patterns are changing and highlights five facts CI leaders should act on in 2026 based on current Microsoft Threat Intelligence observations across sectors. The post is a short security blog entry pointing readers to the full analysis.

security: Guidance for detecting, investigating, and defending against the Trivy supply chain compromise

Microsoft Security Blog

2026-03-25

Microsoft describes a Trivy supply-chain compromise in which attackers abused trusted distribution channels to deliver credential-stealing malware into CI/CD pipelines. The post outlines attacker techniques plus detection, investigation, and defense steps for security teams.

February (2)

security: Unify now or pay later: New research exposes the operational cost of a fragmented SOC

Microsoft Security Blog

2026-02-17

Microsoft and Omdia report that fragmented security tooling and workflows are increasing SOC operational strain and contributing to overload.

security: Your complete guide to Microsoft experiences at RSAC™ 2026 Conference

Microsoft Security Blog

2026-02-12

Microsoft announced its presence at the RSAC 2026 Conference and positioned its show-floor content around “Frontier Firms,” described as human-led and agent-operated organizations.

January (2)

security: Microsoft Security success stories: Why integrated security is the foundation of AI transformation

Microsoft Security Blog

2026-01-22

Microsoft highlights how Ford, Icertis, and TriNet modernized their security posture by adopting integrated Microsoft security solutions—embedding Zero Trust principles, automating defenses, and enabling secure AI innovation at scale.

security: How Microsoft builds privacy and security to work hand-in-hand

Microsoft Security Blog

2026-01-13

The article describes how Microsoft aligns privacy and security initiatives, using advanced tools and adherence to global compliance standards to protect customer data and foster trust.

2025 (3)

December (1)

security: How to build forward-thinking cybersecurity teams for tomorrow

Microsoft Security Blog

2025-12-02

The article argues organizations must future-proof cybersecurity talent by building agile, innovative teams that prioritize continuous learning and adaptability to evolving threats.

November (2)

security: Charting the future of SOC: Human and AI collaboration for better security

Microsoft Security Blog

2025-11-25

Microsoft describes its experience building autonomous AI agents for managed detection and response (MDR) and argues that GenAI-powered security operations centers (SOCs) will reshape how humans and AI collaborate to improve detection, investigation, and response.

security: New IDC research highlights a major cloud security shift

Microsoft Security Blog

2025-11-06

IDC research urges CISOs to adopt AI-powered, integrated cloud security platforms—such as CNAPP, XDR, and SIEM—to lower risk, reduce complexity, and improve resilience, according to a Microsoft Security Blog post.