New whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls.
The post Managing open-weight model risk in enterprise deployments appeared first on Microsoft Security Blog.
Managing open-weight model risk in enterprise deployments Read More »
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement agencies and other partners worldwide, Microsoft’s Digital Crimes Unit (DCU) facilitated a disruption of the ecosystem.
The post The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime appeared first on Microsoft Security Blog.
Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Program helps advance future readiness.
The post Post-quantum authentication: Why organizations should start testing certificate ecosystems now appeared first on Microsoft Security Blog.
Read how How Microsoft Security’s FORGE Lab is scaling vulnerability research from Windows to the Linux kernel.
The post 3 lessons from frontier AI vulnerability research appeared first on Microsoft Security Blog.
3 lessons from frontier AI vulnerability research Read More »
Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management.
The post CISO perspectives on managing vulnerability risks in the age of AI appeared first on Microsoft Security Blog.
CISO perspectives on managing vulnerability risks in the age of AI Read More »
According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacted by cyber threats in 2026, accounting for 27% of observed activity, up from 17% in 2025.
The post Preparing governments for an era of interconnected cyber risk appeared first on Microsoft Security Blog.
Preparing governments for an era of interconnected cyber risk Read More »
Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more interconnected.
The post Insights from the 2026 Microsoft Digital Defense Report appeared first on Microsoft Security Blog.
Insights from the 2026 Microsoft Digital Defense Report Read More »
This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, data, applications, clouds, infrastructure, and the AI agents now working alongside your teams.
The post Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026 appeared first on Microsoft Security Blog.
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026 Read More »
Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection opportunities, and mitigation guidance.
The post Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 appeared first on Microsoft Security Blog.
Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access channels for follow-on activity
The post Phishing Abuses RMM Tools for Persistent Access appeared first on Microsoft Security Blog.
Phishing Abuses RMM Tools for Persistent Access Read More »
