CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order to deliver malware to travelers and stea...
What’s new in Microsoft Security: July 2026
Explore July 2026 Microsoft Security updates, including agentic defense, AI threat protection, identity, data security, and advanced endpoint management.
Better security starts with better questions
Learn how better questions, trusted AI, and human judgment help security leaders make confident decisions and build resilient systems.
Rethinking security for the age of AI
Enhancing AI security through global AI red teaming
Microsoft's External Red Team Alliance (EXTRA) is a global AI security initiative designed to advance AI safety research and red teaming. By partnering with universities, researchers, and regional experts, EXTRA helps identify emerging AI r...
Email threat landscape: Q2 2026 trends and insights
In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contributed to sustained declines in several major phishing techniques, while threat actors expanded into Teams-based social ...
Real world incident response: Microsoft and AXA XL strengthen cyber resilience
Our collaboration with AXA XL brings Microsoft Incident Response services directly to cyber insurance policyholders, helping organizations coordinate technical, business, and insurance decisions.
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
Join Microsoft Security at Black Hat USA 2026 for supply chain research, hands-on security experiences, expert conversations, and our reception.
ACR Stealer: Two observed intrusion chains amid increased threat activity
From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal browser credentials, authentication token...
Least privilege for AI agents: Identity, access, and tool binding
As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure.
What's New
Top 5 Across All Sources-
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
Microsoft Security Blog · 1d ago -
What’s new in Microsoft Security: July 2026
Microsoft Security Blog · 3d ago -
Heimdal data reveals MediaArena adware completes persistence before antivirus quarantine finishes
Heimdal Security Blog · 3d ago -
How Heimdal grew from a bold idea into a global cybersecurity platform
Heimdal Security Blog · 3d ago -
MediaArena malvertising: why a quarantine isn’t the end of the incident
Heimdal Security Blog · 3d ago
Latest
Microsoft Security BlogCaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theftMicrosoft Security BlogWhat’s new in Microsoft Security: July 2026Heimdal Security BlogHeimdal data reveals MediaArena adware completes persistence before antivirus quarantine finishesHeimdal Security BlogHow Heimdal grew from a bold idea into a global cybersecurity platformHeimdal Security BlogMediaArena malvertising: why a quarantine isn’t the end of the incidentMicrosoft Security BlogBetter security starts with better questionsHeimdal Security BlogTools Change. Teach People How to Keep UpMicrosoft Security BlogRethinking security for the age of AIMicrosoft Security BlogEnhancing AI security through global AI red teamingMicrosoft Security BlogEmail threat landscape: Q2 2026 trends and insightsHeimdal Security BlogThe 4 best managed EDR service suppliers (and how to choose)Microsoft Security BlogReal world incident response: Microsoft and AXA XL strengthen cyber resilienceHeimdal Security BlogTop 4 Best SOC Platforms 2026 – Provider ComparisonMicrosoft Security BlogMicrosoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacksMicrosoft Security BlogACR Stealer: Two observed intrusion chains amid increased threat activityMicrosoft Security BlogLeast privilege for AI agents: Identity, access, and tool bindingThe Last WatchdogNews alert: Pulse Security launches with $8 million for AI platform to modernize CISO operationsThe Last WatchdogNews alert: Insignary’s on-demand SBOM verification boosts software supply chain securityThe Last WatchdogNews alert: Tego AI finds Anthropic’s integration of Claude and Slack can trigger unauthorized actionsHeimdal Security BlogTop 6 Managed Detection and Response ProvidersMicrosoft Security BlogCaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theftMicrosoft Security BlogWhat’s new in Microsoft Security: July 2026Heimdal Security BlogHeimdal data reveals MediaArena adware completes persistence before antivirus quarantine finishesHeimdal Security BlogHow Heimdal grew from a bold idea into a global cybersecurity platformHeimdal Security BlogMediaArena malvertising: why a quarantine isn’t the end of the incidentMicrosoft Security BlogBetter security starts with better questionsHeimdal Security BlogTools Change. Teach People How to Keep UpMicrosoft Security BlogRethinking security for the age of AIMicrosoft Security BlogEnhancing AI security through global AI red teamingMicrosoft Security BlogEmail threat landscape: Q2 2026 trends and insightsHeimdal Security BlogThe 4 best managed EDR service suppliers (and how to choose)Microsoft Security BlogReal world incident response: Microsoft and AXA XL strengthen cyber resilienceHeimdal Security BlogTop 4 Best SOC Platforms 2026 – Provider ComparisonMicrosoft Security BlogMicrosoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacksMicrosoft Security BlogACR Stealer: Two observed intrusion chains amid increased threat activityMicrosoft Security BlogLeast privilege for AI agents: Identity, access, and tool bindingThe Last WatchdogNews alert: Pulse Security launches with $8 million for AI platform to modernize CISO operationsThe Last WatchdogNews alert: Insignary’s on-demand SBOM verification boosts software supply chain securityThe Last WatchdogNews alert: Tego AI finds Anthropic’s integration of Claude and Slack can trigger unauthorized actionsHeimdal Security BlogTop 6 Managed Detection and Response Providers
By Source
Feeds organized so you can skim by site.
Density
Sort
Heimdal data reveals MediaArena adware completes persistence before antivirus quarantine finishes
New data from Heimdal's telemetry measures the gap between execution of the MediaArena adware and the completion of quarantine. The same pattern has been confirmed across more than 40 client environments.
How Heimdal grew from a bold idea into a global cybersecurity platform
Heimdal did not start as a traditional cybersecurity company. It started with two Danish cybersecurity researchers, a piece of innovative technology and a challenge. Could they create something that could identify vulnerabilities, intercept...
MediaArena malvertising: why a quarantine isn’t the end of the incident
If Microsoft Defender quarantines BrowserModifier:Win32/MediaArena on one of your endpoints, the alert reads like a win. Our SOC data says treat it as a live persistence incident instead. In the case we timed, the payload finished writing i...
Tools Change. Teach People How to Keep Up
“Make everyone one percent better and it compounds across the team.” That’s the line Joe Head wrote about his own job and when I read it back to him, he didn’t hesitate. “That is 100% the objective,” he said. Joe runs AI adoption for an 80-...
The 4 best managed EDR service suppliers (and how to choose)
There are several cybersecurity companies that offer managed EDR services in 2026. Here’s what actually separates them, and who each one suits. Most successful cyber attacks begin with a breached laptop, a smartphone or a server. Over the p...
Top 4 Best SOC Platforms 2026 – Provider Comparison
Without the right tools, no security operations centre (SOC) can do its job properly. A SOC platform brings together a range of security technologies that let your analysts rapidly identify threats, investigate them and implement fixes. The...
Top 6 Managed Detection and Response Providers
There are several major managed detection and response (MDR) companies to choose from. We’ve compared the main offerings of the best MDR providers to help you decide which is right for your organisation. Maybe it was a near miss, or a secur...
Cyber-Aware Customers Are Raising the Bar for MSPs and Other Vendors
Your client is no longer just buying your security advice. They’re auditing whether you live by it. That was a clear message from my exclusive interview with Heather MacDonald Alford, an MSP finance specialist and owner of Counting Creators...
How to scale your patches without scaling your team (the patch wave)
Most breaches don’t start with a vulnerability nobody knew about. They start with one nobody patched in time. Vulnerability exploitation is now the single biggest way attackers get into a network. It has overtaken stolen credentials for the...
AI didn’t break patching. It showed us patching was already broken.
Claude Mythos, an AI model from Anthropic, has found 23,019 software vulnerabilities in the past month. Fewer than 1% of them have been patched. That gap is the story. Finding a vulnerability used to be the hard part, the thing that limited...
15 loaded
News alert: Pulse Security launches with $8 million for AI platform to modernize CISO operations
SAN FRANCISCO, July 15, 2026, CyberNewswire – Backed by Foundation Capital and Zetta Venture Partners with $8M in seed funding, Pulse Security delivers the program intelligence and agentic infrastructure that security leaders have been mi...
News alert: Insignary’s on-demand SBOM verification boosts software supply chain security
TORONTO, July 15, 2026, CyberNewswire ŌĆō According to Insignary Inc., a leader in software supply chain security and binary software composition analysis (SCA), most organizations cannot independently verify what is actually inside the sof...
News alert: Tego AI finds Anthropic’s integration of Claude and Slack can trigger unauthorized actions
TEL AVIV, Israel, July 14, 2026, CyberNewswire – Tego AI, a cybersecurity company, published new research identifying a potentially critical security weakness in Claude Tag, Anthropic’s native integration between Claude and Slack. Resea...
News alert: OpenMatter joins HOL initiative to shape trust standards for autonomous AI
MELBOURNE, Fla., July 8, 2026, CyberNewswire – OpenMatter Network today announced that it has joined the founding group of organizations participating in the Hashgraph Online (HOL) Partner Program, where the company will help develop stan...
News alert: Insignary tackles SBOM accuracy gap as AI tools intensify software supply-chain risk
TORONTO, July 6, 2026, CyberNewswire тАУ Insignary, Inc., whose patented binary fingerprint technology has been cited in four Gartner research reports, today announced its recognition as a Sample Vendor for Reachability Analysis in the Gart...
News alert: Link11 launches faster DDoS mitigation to counter AI-driven, adaptive network attacks
FRANKFURT, July 1, 2026, CyberNewswire – Link11, a leading European provider of cloud-based cybersecurity solutions, today announced the launch of its completely rebuilt Layer 3/4 DDoS mitigation solution, designed to address the growing ...
News alert: Reflectiz partners with Taboola to host webinar on AI-driven marketing security risks
BOSTON, June 30, 2026, CyberNewswire – Reflectiz, the web exposure management platform, today announced a live webinar with Taboola, "Securing Third-Party Marketing in the AI Era," taking place July 8 at 9 AM EDT / 3 PM CEST. Every market...
News alert: OpenMatter launches platform to verify AI activity across enterprise systems
MELBOURNE, Fla., June 30, 2026, CyberNewswire – OpenMatter Network today announced the launch of its cryptographically verifiable platform for secure collaboration and AI governance, built on a simple premise: Don't Trust Data. Prove It. ...
News alert: SpyCloud report finds phishing surge exposing employee data at Fortune 100 companies
AUSTIN, Tex., June 17, 2026, CyberNewswireŌĆōSpyCloud, the leader in identity threat protection, today released its 2026 Phishing Pulse Report, revealing that phishing attacks continue to increase in both volume and sophistication for enter...
News alert: Heimdal study finds executives are more confident than frontline IT teams on AI risk
LONDON, June 17, 2026, CyberNewswire–Heimdal today published The State of AI Risk Management in 2026, a survey of 1,000 IT professionals across the United Kingdom and the United States. The report's headline finding is a divide inside the...
34 loaded
Copilot in Excel: Built for the era of Frontier Finance
- Discover how Copilot in Excel transforms finance workflows with skills, data connectors, and capabilities for traceability.
Copilot Cowork is now generally available
Copilot Cowork is now generally available worldwide, bringing secure, AI-powered automation for complex enterprise tasks in Microsoft 365.
Introducing Microsoft Scout: Your always-on personal agent
Microsoft introduces a new, always-on personal agent, Microsoft Scout, integrated across the Microsoft 365 apps you use every day.
Announcing the new Work IQ APIs
Build enterprise agents with Work IQ APIs for Microsoft 365—bringing business context, tools, and secure, scalable intelligence into every workflow.
Introducing Microsoft 365 Business with Copilot: The new standard for small business
Meet Microsoft 365 Business with Copilot—the AI-powered solution transforming how small businesses work, collaborate, and compete.
Introducing a new design for Microsoft 365 Copilot
Copilot’s redesigned experience delivers faster performance, adaptive tools, and clearer AI-powered workflows to help you easily move from intention to outcome.
New and improved: Computer-using agents, a new workflows experience, and real-time voice experiences
Explore what's new in Copilot Studio, May 2026: computer-using agents are now available, plus redesigned workflows and Work IQ extensibility.
New and improved: Agent governance, intelligent workflows, and connected app experiences
See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator.
Copilot Cowork: From conversation to action across skills, integrations, and devices
Today, we’re announcing additional capabilities in Cowork to expand on what it can make possible for you.
Microsoft 365 Copilot, human agency, and the opportunity for every organization
Empower your organization with Microsoft 365 Copilot—AI that bridges human potential and business outcomes for the future of work.
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Microsoft Build 2026 highlights advancements in app development with Microsoft Fabric and Microsoft Databases, emphasizing a unified data and AI platform.
Azure IaaS: Defense in depth built on secure-by-design principles
Explore how Azure IaaS uses defense in depth and secure-by-design principles to deliver layered, scalable cloud security across compute, network, and data.
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
Learn how Microsoft Azure Integrated HSM delivers hardware‑enforced key protection in the cloud, combining FIPS Level 3 assurances with transparency and open‑source collaboration.
Azure IaaS: Keep critical applications running with built-in resiliency at scale
Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities.
Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure
Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more.
Azure reliability, resiliency, and recoverability: Build continuity by design
Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more.
No matching sources found.