Exposing Fox Tempest: A malware-signing service operation
Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cyber
共收录 122 条相关情报。
← 返回所有主题Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cyber
Storm-2949 turned stolen credentials into a cloud-wide breach, moving from identity compromise to large-scale data theft
See how built-in security helps keep your growing business running, protect customer trust, and support growth. The post
As AI agents gain autonomy, defense in depth must evolve, with application-layer design, identity, and human oversight a
Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant de
Exposed UIs, weak authentication, and risky defaults could turn cloud-native AI apps on Kubernetes into potential target
What if you could generate realistic attack telemetry on demand? Explore research methods that translate attacker behavi
Today Microsoft is announcing a major step forward in AI-powered cyber defense: a new multi-model agentic scanning harne
Read how to protect consumer websites and defend against modern DDoS attacks with layered security, resilient architectu
Microsoft Incident Response investigated an attack operated through legitimate and trusted administrative mechanisms to
Dirty Frag is a newly disclosed Linux local privilege escalation vulnerability affecting kernel networking and memory-fr
New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these vuln
This World Passkey Day, read how Microsoft is advancing passkey adoption to replace passwords, cut phishing risk, and de
Microsoft is excited to be named an Overall Leader, and the Market Leader in the Kuppinger Cole Analyst’s 2026 Emerging
Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands
Microsoft Defender Research observed a large-scale credential theft campaign that exemplifies this trend, using code of
CVE-2026-31431
2026年5月,微软安全博客披露了一个影响Linux系统的高危漏洞CVE-2026-31431,命名为“Copy Fail”。该漏洞允许攻击者在云环境和Kubernetes工作负载中实现本地权限提升至root。漏洞根因在于Linux文件复制
Today we’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage
Stay ahead of emerging threats with Microsoft’s newest security innovations and updates, delivered through the In the Lo
In early 2026, email threats increased with a rise in credential phishing, QR code phishing, and CAPTCHA-gated campaigns