From package to postinstall payload: Inside the Mastra npm supply chain compromise
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence.
Crypto Clipper uses Tor and worm-like propagation for persistence and control
Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, Tor-based communications, and worm-like propagation. Beyond stealing cryptocurrency transactions, the malware establ...
Beyond the benchmark: Advancing security at AI speed
Read how Microsoft Security has advanced its agentic vulnerability detection system, codename MDASH, integrating into real-world workflows across Windows, Azure, and identity systems.
Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report
Microsoft has been named a leader for the third consecutive time in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026.
AI is accelerating cyberattacks—here’s how to stay ahead
See how Microsoft unifies identity and security signals to help teams prevent, detect, and respond to AI-accelerated attacks faster.
Microsoft Defender email security benchmarking: Key insights from one year of data
See how Microsoft Defender performed in one year of real-world email security benchmarking against SEG and ICES vendors.
Turn specs into evals for any agent with ASSERT
Reconstructing AI activity in investigations
Learn how to investigate AI activity in Microsoft 365 Copilot and Azure AI services using a structured, telemetry-driven approach. This playbook helps security teams reconstruct events, assess data exposure, and detect potential threats fas...
AI brands as bait: How threat actors are using the AI hype in social engineering
As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure.
Securing CI/CD in an agentic world: Claude Code Github action case
Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to workflow secrets under specific conditions. This research examines the attack chain, responsible disclosure process, Ant...
What's New
Top 5 Across All Sources-
From package to postinstall payload: Inside the Mastra npm supply chain compromise
Microsoft Security Blog · 11h ago -
Crypto Clipper uses Tor and worm-like propagation for persistence and control
Microsoft Security Blog · 16h ago -
Beyond the benchmark: Advancing security at AI speed
Microsoft Security Blog · 19h ago -
Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report
Microsoft Security Blog · 20h ago -
AI is accelerating cyberattacks—here’s how to stay ahead
Microsoft Security Blog · 22h ago
Latest
Microsoft Security BlogFrom package to postinstall payload: Inside the Mastra npm supply chain compromiseMicrosoft Security BlogCrypto Clipper uses Tor and worm-like propagation for persistence and controlMicrosoft Security BlogBeyond the benchmark: Advancing security at AI speedMicrosoft Security BlogForrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ reportMicrosoft Security BlogAI is accelerating cyberattacks—here’s how to stay aheadMicrosoft 365 BlogCopilot Cowork is now generally availableHeimdal Security BlogThe State of AI Risk Management in 2026Microsoft Security BlogMicrosoft Defender email security benchmarking: Key insights from one year of dataHeimdal Security BlogYour Next Insider Threat May Be an AI CoworkerHeimdal Security BlogThe OSI Model and Its Two Missing LayersThe Last WatchdogNews alert: Cloud security report finds fragmented tools widening the cloud complexity gapMicrosoft Security BlogTurn specs into evals for any agent with ASSERTMicrosoft Security BlogReconstructing AI activity in investigationsMicrosoft Security BlogAI brands as bait: How threat actors are using the AI hype in social engineeringHeimdal Security BlogHeimdal® Marks Six Years of Consecutive ISAE 3000 SOC 2 Type II CertificationMicrosoft Security BlogSecuring CI/CD in an agentic world: Claude Code Github action caseThe Last WatchdogNews alert: Halo Security recognized for helping MSPs manage customers’ external attack surfacesMicrosoft 365 BlogIntroducing Microsoft Scout: Your always-on personal agentMicrosoft 365 BlogAnnouncing the new Work IQ APIsSecurity | Microsoft Azure Blog | Microsoft AzureMicrosoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft DatabasesMicrosoft Security BlogFrom package to postinstall payload: Inside the Mastra npm supply chain compromiseMicrosoft Security BlogCrypto Clipper uses Tor and worm-like propagation for persistence and controlMicrosoft Security BlogBeyond the benchmark: Advancing security at AI speedMicrosoft Security BlogForrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ reportMicrosoft Security BlogAI is accelerating cyberattacks—here’s how to stay aheadMicrosoft 365 BlogCopilot Cowork is now generally availableHeimdal Security BlogThe State of AI Risk Management in 2026Microsoft Security BlogMicrosoft Defender email security benchmarking: Key insights from one year of dataHeimdal Security BlogYour Next Insider Threat May Be an AI CoworkerHeimdal Security BlogThe OSI Model and Its Two Missing LayersThe Last WatchdogNews alert: Cloud security report finds fragmented tools widening the cloud complexity gapMicrosoft Security BlogTurn specs into evals for any agent with ASSERTMicrosoft Security BlogReconstructing AI activity in investigationsMicrosoft Security BlogAI brands as bait: How threat actors are using the AI hype in social engineeringHeimdal Security BlogHeimdal® Marks Six Years of Consecutive ISAE 3000 SOC 2 Type II CertificationMicrosoft Security BlogSecuring CI/CD in an agentic world: Claude Code Github action caseThe Last WatchdogNews alert: Halo Security recognized for helping MSPs manage customers’ external attack surfacesMicrosoft 365 BlogIntroducing Microsoft Scout: Your always-on personal agentMicrosoft 365 BlogAnnouncing the new Work IQ APIsSecurity | Microsoft Azure Blog | Microsoft AzureMicrosoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
By Source
Feeds organized so you can skim by site.
Density
Sort
Copilot Cowork is now generally available
Copilot Cowork is now generally available worldwide, bringing secure, AI-powered automation for complex enterprise tasks in Microsoft 365.
Introducing Microsoft Scout: Your always-on personal agent
Microsoft introduces a new, always-on personal agent, Microsoft Scout, integrated across the Microsoft 365 apps you use every day.
Announcing the new Work IQ APIs
Build enterprise agents with Work IQ APIs for Microsoft 365—bringing business context, tools, and secure, scalable intelligence into every workflow.
Introducing Microsoft 365 Business with Copilot: The new standard for small business
Meet Microsoft 365 Business with Copilot—the AI-powered solution transforming how small businesses work, collaborate, and compete.
Introducing a new design for Microsoft 365 Copilot
Copilot’s redesigned experience delivers faster performance, adaptive tools, and clearer AI-powered workflows to help you easily move from intention to outcome.
New and improved: Computer-using agents, a new workflows experience, and real-time voice experiences
Explore what's new in Copilot Studio, May 2026: computer-using agents are now available, plus redesigned workflows and Work IQ extensibility.
New and improved: Agent governance, intelligent workflows, and connected app experiences
See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator.
Copilot Cowork: From conversation to action across skills, integrations, and devices
Today, we’re announcing additional capabilities in Cowork to expand on what it can make possible for you.
Microsoft 365 Copilot, human agency, and the opportunity for every organization
Empower your organization with Microsoft 365 Copilot—AI that bridges human potential and business outcomes for the future of work.
Microsoft Agent 365, now generally available, expands capabilities and integrations
We’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage shadow AI agents. Learn more.
The State of AI Risk Management in 2026
There is no excerpt because this is a protected post.
Your Next Insider Threat May Be an AI Coworker
Heimdal sysadmin Alex Panait spent weeks testing Claude Cowork inside the company. His verdict was blunt. It felt like onboarding a junior employee with no manager, no scoped access, and no clear accountability when something goes wrong. Ex...
The OSI Model and Its Two Missing Layers
Two missing layers of the OSI Model can blow up your cyber defense strategy anytime. Jayal Yadal explain what they are.
Heimdal® Marks Six Years of Consecutive ISAE 3000 SOC 2 Type II Certification
Heimdal has achieved ISAE 3000 SOC 2 Type II certification for the sixth consecutive year, reflecting the company's continued focus on operational security, accountability, and data protection.
AI Will Absorb 99.98% of SOC Triage Within a Year, as 79% of IT teams brace for AI-driven workload shift
Morten Kjaersgaard expects fewer than 500 of three million monthly alerts to need a human analyst in the year ahead. The role is being rebuilt around cases that warrant judgement.
Top 10 Cybersecurity Companies in Europe
Over the last 10-15 years, the cybersecurity scene has gotten increasingly complex, as organizations adopt new technology and hackers evolve more innovative ways to target them. At the same time, data protection and compliance have become m...
Heimdal Expands AI Strategy with AI Wingman and Third-Party AI Containment
Heimdal today unveiled the next phase of its AI strategy, expanding AI Wingman with three new layers - Assist, Triage and SOC - alongside the introduction of Third-Party AI Containment.
You Only Know What You’ve Got When Its Gone
Prepare for the expected. Rehearse an action plan in case of technology failure or cyberattacks. We all know they can happen.
Nordic MSPs Can Now Access Heimdal’s Unified Security and Compliance Platform Through Elovade
Heimdal has appointed Elovade as its official distributor in the Nordic region. The move gives MSPs and resellers across Sweden, Norway, Denmark, Iceland, and Finland direct access to Heimdal's consolidated cybersecurity platform through a ...
OpenClaw Incidents Show Why AI Adoption Pressure Puts Companies at Risk
The OpenClaw security failures show how hasty AI adoption can expose businesses and supply chains to major cyber risk.
15 loaded
News alert: Cloud security report finds fragmented tools widening the cloud complexity gap
News alert: Halo Security recognized for helping MSPs manage customers’ external attack surfaces
FIRESIDE CHAT: Deepfakes exploit human emotion, making employee reflex training essential
News alert: TVC Analyst Group names 12 vendors to watch ahead of Gartner’s security summit
GUEST ESSAY: AI pipelines are shattering network security — most companies haven’t even noticed yet
GUEST ESSAY: AI can speed up communication, but it can also weaken human connection
The first warning sign came on stage. Related: Carol Sturka declares her agency I had turned to ChatGPT to help organize research notes for an upcoming keynote. I was pressed for time and wanted help spotting patterns I might have missed. T...
News alert: Orchid Security study finds invisible identities now outnumber managed accounts
NEW YORK, May 19, 2026, CyberNewswireŌĆöOrchid Security, the company solving identity at its core, today released its Identity Gap: 2026 Snapshot report, revealing that the majority of enterprise identity now exists outside the view of iden...
MY TAKE: AI agents force a rethink of enterprise service lines as vendors move up the tech stack
ORLANDO — Companies are pulling AI agents into their daily operations through a dozen side doors. Related: SaaS and AI agents converge One of them was in focus at KB4-CON, KnowBe4’s annual customer conference at the Marriott World Cente...
LW ROUNDTABLE: Microsoft Edge normalizes credential exposure — security pros push back
By design. Two words that have done an awful lot of heavy lifting in the cybersecurity industry over the years. They tend to surface whenever a vendor wants to wave off a serious finding without fixing it. Related: The unending password pro...
FIRESIDE CHAT: Cyber insurers deepen SMB security role as supply chain attacks spread
The cyber insurance industry set out to manage financial risk. Along the way, it has quietly became the security operations provider for a significant share of American small businesses. An $11 billion acquisition agreement announced earlie...
21 loaded
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Microsoft Build 2026 highlights advancements in app development with Microsoft Fabric and Microsoft Databases, emphasizing a unified data and AI platform.
Azure IaaS: Defense in depth built on secure-by-design principles
Explore how Azure IaaS uses defense in depth and secure-by-design principles to deliver layered, scalable cloud security across compute, network, and data.
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
Learn how Microsoft Azure Integrated HSM delivers hardware‑enforced key protection in the cloud, combining FIPS Level 3 assurances with transparency and open‑source collaboration.
Azure IaaS: Keep critical applications running with built-in resiliency at scale
Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities.
Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure
Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more.
Azure reliability, resiliency, and recoverability: Build continuity by design
Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more.
No matching sources found.