SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting.

Microsoft Research has released new threat research detailing how a capable agent model could be turned into a sleeper agent ...

Microsoft FORGE Lab researchers used codename MDASH to investigate Linux kernel vulnerabilities, resulting in 59 upstream bug reports, 33 assigned CVEs, and 38 merged fixes. The research includes ...

In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector ...

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the ...

Discover why Gartner named Microsoft a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms for ...

Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple ...

Microsoft FORGE Lab researchers found memory-safety bugs in Rust's core and std libraries, including cases where safe Rust code can trigger undefined behavior. Using Hyenas, FORGE's frontier research ...

Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius.

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and ...

Learn how Azure Update Manager and other tools can help teams evolve into a risk-driven system that can move at different speeds ...

Imagine Cup 2027 applications are open! Explore seven competition categories, new opportunities for early-stage startups, and how to apply.