Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and re
共收录 122 条相关情报。
← 返回所有主题Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and re
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through au
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and effici
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity
Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft,
Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential ab
New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection c
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tra
Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Progr
Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post
Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability manageme
Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to
According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacte
This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, d
Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access c
Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to d
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capab
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intru