Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involv
共收录 122 条相关情报。
← 返回所有主题Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involv
This month's updates help you discover and control local AI agents, extend Zero Trust to agent traffic, and strengthen S
We are announcing ISOC in Microsoft Defender: a foundation built for agentic security that brings leading solutions for
EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted
AI has made fundamental changes to the operating environment for cybersecurity. Explore exposure management guidance on
The latest email security benchmarking reports show strong Microsoft Defender performance across pre-delivery and post-d
Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices
See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack c
Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders und
Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how thr
这篇文章由微软安全博客发布,针对AI向客户自有环境及边缘设备下沉的趋势,提出了系统化的安全建议。主体观点认为,在客户拥有且可物理接触的硬件环境中部署Edge AI时,传统云端信任边界已不适用,需要在保护敏感数据、凭据和模型之前,先对底层的系
Invisible Unicode characters popularized for hiding instructions from AI models are now being used to obfuscate words be
Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collabor
An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and
Cyber resilience starts before a crisis. Gain practical insights from DART to strengthen readiness and response. The pos
Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading,
This month’s updates provide new capabilities to help organizations gain insights into agent activity, expand security c
Microsoft Threat Intelligence examines attacks on exposed AI workloads, including LiteLLM gateway exploitation, credenti
Organizations need protection that operates in the gap between discovery and remediation. The post The patch window is c
Microsoft is named a visionary leader in the 2026 Frost Radar for Cloud Workload Protection Platforms, recognized for un