In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector ...

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the ...

Discover how the CISO’s role is evolving in the agentic era, from protecting enterprise innovation to modernizing cyber ...

As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency ...

Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple ...

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...

Discover why Gartner named Microsoft a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms for ...

Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius.

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and ...

Explore how AI business process transformation helps organizations redesign workflows, build trust, and deliver measurable ...

Explore highlights from Power Platform Community Conference (PPCC) 2026 and see how makers are using AI, apps, and automation to transform business processes.