SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting.

In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector ...

Microsoft Research has released new threat research detailing how a capable agent model could be turned into a sleeper agent ...

Discover why Gartner named Microsoft a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms for ...

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search ...

Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple ...

Microsoft FORGE Lab researchers used codename MDASH to investigate Linux kernel vulnerabilities, resulting in 59 upstream bug reports, 33 assigned CVEs, and 38 merged fixes. The research includes ...

As agents gain access to business data and tools, organizations need ways to manage what each agent is allowed to do. Dynamic ...

Microsoft FORGE Lab researchers found memory-safety bugs in Rust's core and std libraries, including cases where safe Rust code can trigger undefined behavior. Using Hyenas, FORGE's frontier research ...

Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius.

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and ...

Learn how Azure Update Manager and other tools can help teams evolve into a risk-driven system that can move at different speeds ...