SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting.

Microsoft Research has released new threat research detailing how a capable agent model could be turned into a sleeper agent ...

In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector ...

As agents gain access to business data and tools, organizations need ways to manage what each agent is allowed to do. Dynamic ...

Discover why Gartner named Microsoft a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms for ...

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the ...

Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple ...

Microsoft FORGE Lab researchers found memory-safety bugs in Rust's core and std libraries, including cases where safe Rust code can trigger undefined behavior. Using Hyenas, FORGE's frontier research ...

Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius.

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and ...

Learn how Azure Update Manager and other tools can help teams evolve into a risk-driven system that can move at different speeds ...

Imagine Cup 2027 applications are open! Explore seven competition categories, new opportunities for early-stage startups, and how to apply.