Microsoft Security Blog

News
September 18
5 min read

Microsoft Defender delivered 242% return on investment over three years

The latest 2025 commissioned Forrester Consulting Total Economic Impact™ (TEI) study reveals a 242% ROI over three years for organizations that chose Microsoft Defender.

News
July 22
6 min read

Microsoft Sentinel data lake: Unify signals, cut costs, and power agentic AI

We’re evolving our industry-leading Security Incidents and Event Management solution (SIEM), Microsoft Sentinel, to include a modern, cost-effective data lake.

Research
September 24
10 min read

AI vs. AI: Detecting an AI-obfuscated phishing campaign

Microsoft Threat Intelligence recently detected and blocked a credential phishing campaign that likely used AI-generated code to obfuscate its payload and evade traditional defenses, demonstrating a broader trend of attackers leveraging AI to increase the effectiveness of their operations and underscoring the need for defenders to understand and anticipate AI-driven threats.

Threat intelligence

August 27

23 min read

Storm-0501’s evolving techniques lead to cloud-based ransomware

Financially motivated threat actor Storm-0501 has continuously evolved their campaigns to achieve sharpened focus on cloud-based tactics, techniques, and procedures (TTPs).
August 21

26 min read

Think before you Click(Fix): Analyzing the ClickFix social engineering technique

The ClickFix social engineering technique has been growing in popularity, with campaigns targeting thousands of enterprise and end-user devices daily.
August 18

16 min read

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework

A comprehensive technical deep dive on PipeMagic, a highly modular backdoor used by Storm-2460 masquerading as a legitimate open-source ChatGPT Desktop Application.

View all threat intelligence

Stay ahead of threats

Get expert insights, threat intelligence, and the latest cybersecurity reports from Security Insider.

See the latest findings

AI and machine learning

September 25

4 min read

Introducing Microsoft Marketplace — Thousands of solutions. Millions of customers. One Marketplace.

To empower customers in becoming Frontier, we’re excited to announce the launch of the reimagined Microsoft Marketplace, your trusted source for cloud solutions, AI apps and agents.
August 26

8 min read

Securing and governing the rise of autonomous agents

Hear directly from Corporate Vice President and Deputy Chief Information Security Officer (CISO) for Identity, Igor Sakhnov, about how to secure and govern autonomous agents.
August 13

3 min read

Connect with the security community at Microsoft Ignite 2025

Join us at Microsoft Ignite 2025 for a week of immersive learning, hands-on experiences, and strategic insights tailored for security leaders, practitioners, and innovators.

View all AI and machine learning

Modernize your security operations center

Confidently secure your multicloud, multiplatform environment with Microsoft Sentinel – a cloud-native security information and event management (SIEM) solution.

Learn more about Microsoft Sentinel

Latest posts

September 24

4 min read

Retail at risk: How one alert uncovered a persistent cyberthreat

In the latest edition of our Cyberattack Series, we dive into real-world cases targeting retail organizations.
September 16

6 min read

Microsoft Purview innovations for your Fabric data: Unify data security and governance for the AI era

The Microsoft Fabric and Purview teams are thrilled to participate in the European Microsoft Fabric Community Conference.
September 5

2 min read

Azure mandatory multifactor authentication: Phase 2 starting in October 2025

Microsoft Azure is announcing the start of Phase 2 multi-factor authentication enforcement at the Azure Resource Manager layer, starting October 1, 2025.
August 27

4 min read

Microsoft ranked number one in modern endpoint security market share third year in a row

For a third year a row, Microsoft has been named the number one leader for endpoint security market share, as featured in a new IDC report.
August 20

6 min read

Quantum-safe security: Progress towards next-generation cryptography

Microsoft is proactively leading the transition to quantum-safe security by advancing post-quantum cryptography, collaborating with global standards bodies, and helping organizations prepare for the coming quantum era.
August 12

5 min read

Dow’s 125-year legacy: Innovating with AI to secure a long future

Microsoft recently spoke with Mario Ferket, Chief Information Security Officer for Dow, about the company’s approach to AI in security.