SecurityMicrosoft Threat Intelligence reports that a macOS ClickFix campaign has shifted from openly serving malicious lures to using server-side browser fingerprinting that mainly exposes the payload to likely macOS victims. The change makes the operation harder for crawlers, sandboxes, and defenders to spot, increasing the importance of hunting for shared infrastructure patterns and strengthening endpoint protections.
3 min read · Aug 5, 2026
SecurityMicrosoft has been named a Leader across all four categories in KuppingerCole’s 2026 CNAPP Leadership Compass, highlighting Defender for Cloud’s unified approach to cloud and AI security. The recognition matters for security teams as CNAPP platforms increasingly focus on exploitability, attack path analysis, AI security posture, and integrated SOC operations across multicloud environments.
3 min read · Aug 5, 2026
SecurityMicrosoft has detailed ChainDrop, a large-scale npm supply chain attack that compromised more than 400 packages using a self-propagating credential-stealing worm. The campaign matters because it targets developer workstations and CI/CD pipelines, steals cloud and publishing credentials, and can automatically republish infected packages across additional publishers.
3 min read · Aug 5, 2026
SecurityMicrosoft Defender’s attack disruption now includes automatic device isolation for compromised endpoints, adding a new containment layer beyond user-based response. In a published QNET case study, Defender isolated an endpoint in 128 seconds, stopping a multi-stage ransomware-related attack before persistence, credential theft, or lateral movement could occur.
3 min read · Aug 4, 2026
SecurityMicrosoft has expanded its Zero Trust for AI strategy with new assessment capabilities, a DevSecOps pillar in the Zero Trust Workshop, and practical implementation guidance. The updates help security and platform teams assess AI-related risk, secure AI-assisted development, and build a phased roadmap for adopting Zero Trust controls across AI systems.
3 min read · Aug 4, 2026
SecurityMicrosoft has disclosed CaptiveCrunch, an active campaign linked to Midnight Blizzard that hijacks traffic on hospitality and captive portal networks to steal credentials and deliver malware. The threat is especially relevant for organizations with frequent travelers because attackers are abusing Entra ID device code flows, fake update prompts, and adversary-in-the-middle phishing to compromise corporate accounts and endpoints.
3 min read · Jul 31, 2026
SecurityMicrosoft’s July 2026 security updates focus on protecting AI environments, embedding AI into security operations, and strengthening identity, cloud, and data protection foundations. Key additions include Project Perception, new Defender protections for prompt injection and cloud agents, Entra passkeys by default, and expanded Purview controls for Copilot and shadow AI apps.
3 min read · Jul 30, 2026
SecurityMicrosoft is urging security leaders to treat AI security as a systems challenge that requires better questions, clearer objectives, and stronger governance across data, identities, and processes. The message matters for IT and security teams adopting AI because success depends not just on more signals or tools, but on layered controls, human oversight, and decision-making designed for resilience.
3 min read · Jul 29, 2026
SecurityMicrosoft has introduced Project Perception, a new agentic security system designed to help organizations defend against AI-driven threats at machine speed. Entering public preview on August 3, it combines specialized agents, security context, and a multi-model architecture to improve vulnerability management and automate protection while keeping human defenders in control.
3 min read · Jul 27, 2026
SecurityMicrosoft has launched the External Red Team Alliance (EXTRA), a global expansion of its AI Red Team to improve AI safety and security testing with outside experts. The initiative funds 18 university labs across six continents and builds an external network of specialists to assess emerging AI risks that internal teams alone may miss.
3 min read · Jul 27, 2026
SecurityMicrosoft’s Q2 2026 email threat report shows a major 92% drop in Tycoon2FA-linked phishing following disruption efforts, alongside declines in QR code and CAPTCHA-gated phishing. However, defenders should note that attackers are shifting tactics, with Teams-based social engineering, credential phishing, and fast-moving business email compromise campaigns continuing to pose significant risk.
3 min read · Jul 23, 2026
SecurityMicrosoft has partnered with AXA XL to bring Microsoft Defender Experts Cybersecurity Incident Response directly to cyber insurance policyholders. The move aims to speed up containment and recovery by aligning security, legal, executive, and insurance workflows before an incident occurs.
3 min read · Jul 22, 2026