Microsoft

United States9 products listed
Defend your data from cyberattacks using cloud data security solutions. Safeguard your infrastructure, apps, and data with Microsoft Security solutions.
In their own words microsoft.com

Our summaryMaker of Windows and Microsoft 365, and a large security vendor in its own right, covering identity, endpoint, email, cloud and SIEM.

Products listed
9
Research stories
265
Incidents and advisories
645
Indicators
1490

Microsoft in our news, month by month

ResearchIncidents and advisories

Products and the controls they provide

Microsoft Defender for Endpoint

“Strengthen endpoint protection with Microsoft Defender for Endpoint. Stop cyberattacks, boost endpoint security with AI, and secure your devices.”

Endpoint detection and response for Windows, macOS, Linux and mobile devices.

Product page

Microsoft Defender for Identity

“Protect your organization's identity fabric with Microsoft Defender for Identity, an advanced cybersecurity platform for identity threat detection and response.”

Detects attacks against on-premises Active Directory and hybrid identities.

Product page

Microsoft Defender for Office 365

“Microsoft Defender for Office 365 protects your email and collaboration tools from phishing, malware, and BEC attacks using AI-powered, enterprise-grade threat defense.”

Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.

Product page

Microsoft Sentinel

“Run a faster, leaner SOC with Microsoft Sentinel, a cloud-native SIEM that detects threats faster, automates response, and lowers SIEM costs with a data lake.”

Cloud SIEM and automated response, built on Azure.

Product page

Microsoft Purview Data Loss Prevention

“Safeguard business-critical data with Microsoft Purview. Discover unified data security, information protection, data loss prevention, and insider risk management.”

Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.

Product page

Microsoft Defender for Cloud

“Explore Microsoft Defender for Cloud, a security solution and CNAPP that protects cloud‑native application development across multicloud and hybrid environments.”

Cloud posture management and workload protection for Azure, AWS and Google Cloud.

Product page

Microsoft Intune

“Microsoft Intune is a cloud-based unified endpoint management solution built on Zero Trust. Empower IT to manage, secure and govern devices, apps and endpoints.”

Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.

Product page

App Control for Business

“Application Control restricts which applications users are allowed to run and the code that runs in the system core.”

Application control built into Windows, formerly Windows Defender Application Control, with AppLocker as the older option. Policies can be managed through Intune.

Product page

External reviews

Independent tests, peer reviews and articles about Microsoft. We link to them; we did not write or commission them, and nobody pays to appear here.

Research by Microsoft

Stories in our coverage based on what researchers at Microsoft found or reported: 265 in total.

Incidents and advisories

Stories where a Microsoft product had a vulnerability or was attacked, or Microsoft itself was: 645 in total. Useful if you run its products.

Indicators from these storieslatest 30 of 1490 · show
TypeIndicatorStory
malware506e08f9-6e9a-4da4-942b-a099a03644aeConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
malwareConnectWise Cloud BackupConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ip144.172.64.128Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
mitre_attackT1078Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
mitre_attackT1078.004Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
mitre_attackT1136.003Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
mitre_attackT1558.003Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
malwareConnectWise Cloud BackupHackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
cveCVE-2026-96951Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
malwareCoGUIGlobal takedown hits network behind 1 billion phishing messages
malwareHaoziGlobal takedown hits network behind 1 billion phishing messages
malwareIron Man SystemGlobal takedown hits network behind 1 billion phishing messages
malwareStorm-2990Global takedown hits network behind 1 billion phishing messages
malwareStorm-3119Global takedown hits network behind 1 billion phishing messages
cveCVE-2026-102866Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
cveCVE-2026-105016Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
cveCVE-2026-108398Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
cveCVE-2026-65674Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
cveCVE-2026-70242Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
cveCVE-2026-92707Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
cveCVE-2026-96951Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
cveCVE-2026-108398Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
cveCVE-2026-92707Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
cveCVE-2026-96951Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
cveCVE-2024-21348Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
cveCVE-2026-108398Microsoft Patches More Than 1,400 Security Flaws
cveCVE-2026-96951Microsoft Patches More Than 1,400 Security Flaws
cveCVE-2026-108398Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
cveCVE-2026-92707Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
cveCVE-2026-96951Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Vendor Watch

Run Microsoft?

Get an email when a reviewed story names Microsoft, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

From Microsoft

Is this your company, or did we get something wrong?

Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.

How we list vendors

  • A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
  • Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
  • Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
  • Logos, product names and quoted text belong to the vendors and are shown to identify them.
  • Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.