Microsoft FORGE Lab researchers used codename MDASH to investigate Linux kernel vulnerabilities, resulting in 59 upstream bug reports, 33 assigned CVEs, and 38 merged fixes. The research includes ...
Microsoft Research has released new threat research detailing how a capable agent model could be turned into a sleeper agent ...
In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector ...
Discover why Gartner named Microsoft a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms for ...
Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the ...
Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple ...
Microsoft FORGE Lab researchers found memory-safety bugs in Rust's core and std libraries, including cases where safe Rust code can trigger undefined behavior. Using Hyenas, FORGE's frontier research ...
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and ...
Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius.
Learn how Azure Update Manager and other tools can help teams evolve into a risk-driven system that can move at different speeds ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results