Opinions, tips, and news orbiting Microsoft
Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to help defenders detect and disrupt this activity before ransomware deployment.
The post Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments appeared first on Microsoft Security Blog.
We are announcing ISOC in Microsoft Defender: a foundation built for agentic security that brings leading solutions for SIEM and threat protection together.
The post Reimagining the SOC for the agentic era in Microsoft Defender appeared first on Microsoft Security Blog.
Continue reading Reimagining the SOC for the agentic era in Microsoft Defender
There’s no shortage of sound and fury in AI right now.
The post Building the system for AI at work appeared first on Microsoft 365 Blog.
Continue reading Building the system for AI at work
There’s no shortage of sound and fury in AI right now.
The post Building the system for AI at work appeared first on Microsoft 365 Blog.
Continue reading Building the system for AI at work
Information published. This CVE was addressed by updates that were released in September 2026, but the CVE was inadvertently omitted from the September 2026 Security Updates. This is an informational change only. Customers who have already installed th… Continue reading CVE-2026-70125 Microsoft Outlook Remote Code Execution Vulnerability
Information published. Continue reading Chromium CVE-2026-87536: Use after free in V8
Information published. Continue reading Chromium CVE-2026-87536: Use after free in V8
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability