[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:microsoft":3},{"vendor":4,"products":15,"links":124,"research":146,"news":198,"iocs":247,"iocs_total":317,"activity":318},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"microsoft","Microsoft","microsoft.com","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity","US","Maker of Windows and Microsoft 365, and a large security vendor in its own right, covering identity, endpoint, email, cloud and SIEM.","\u002Fvendor-logos\u002Fmicrosoft.png","#0078d4","Defend your data from cyberattacks using cloud data security solutions. Safeguard your infrastructure, apps, and data with Microsoft Security solutions.","2026-10-16T13:44:13.137304+00:00",[16,31,42,53,64,75,86,97,112],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.","Strengthen identity security with Microsoft Entra ID, a cloud identity and access (IAM) solution that prevents identity attacks and supports SSO and Zero Trust.",[23,27],{"slug":24,"name":25,"problem":26},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":28,"name":29,"problem":30},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":32,"name":33,"url":34,"description":35,"pitch":36,"pitch_source_url":34,"controls":37},"defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.","Strengthen endpoint protection with Microsoft Defender for Endpoint. Stop cyberattacks, boost endpoint security with AI, and secure your devices.",[38],{"slug":39,"name":40,"problem":41},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":43,"name":44,"url":45,"description":46,"pitch":47,"pitch_source_url":45,"controls":48},"defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.","Protect your organization's identity fabric with Microsoft Defender for Identity, an advanced cybersecurity platform for identity threat detection and response.",[49],{"slug":50,"name":51,"problem":52},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":54,"name":55,"url":56,"description":57,"pitch":58,"pitch_source_url":56,"controls":59},"defender-for-office-365","Microsoft Defender for Office 365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365","Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.","Microsoft Defender for Office 365 protects your email and collaboration tools from phishing, malware, and BEC attacks using AI-powered, enterprise-grade threat defense.",[60],{"slug":61,"name":62,"problem":63},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":65,"name":66,"url":67,"description":68,"pitch":69,"pitch_source_url":67,"controls":70},"sentinel","Microsoft Sentinel","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-sentinel-siem","Cloud SIEM and automated response, built on Azure.","Run a faster, leaner SOC with Microsoft Sentinel, a cloud-native SIEM that detects threats faster, automates response, and lowers SIEM costs with a data lake.",[71],{"slug":72,"name":73,"problem":74},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",{"slug":76,"name":77,"url":78,"description":79,"pitch":80,"pitch_source_url":78,"controls":81},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.","Safeguard business-critical data with Microsoft Purview. Discover unified data security, information protection, data loss prevention, and insider risk management.",[82],{"slug":83,"name":84,"problem":85},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":87,"name":88,"url":89,"description":90,"pitch":91,"pitch_source_url":89,"controls":92},"defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.","Explore Microsoft Defender for Cloud, a security solution and CNAPP that protects cloud‑native application development across multicloud and hybrid environments.",[93],{"slug":94,"name":95,"problem":96},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":98,"name":99,"url":100,"description":101,"pitch":102,"pitch_source_url":100,"controls":103},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.","Microsoft Intune is a cloud-based unified endpoint management solution built on Zero Trust. Empower IT to manage, secure and govern devices, apps and endpoints.",[104,108],{"slug":105,"name":106,"problem":107},"patch-management","Automated patch management","Known holes get closed in days, not months.",{"slug":109,"name":110,"problem":111},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":113,"name":114,"url":115,"description":116,"pitch":117,"pitch_source_url":118,"controls":119},"app-control-for-business","App Control for Business","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fapp-control-for-business\u002F","Application control built into Windows, formerly Windows Defender Application Control, with AppLocker as the older option. Policies can be managed through Intune.","Application Control restricts which applications users are allowed to run and the code that runs in the system core.","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fapp-control-for-business\u002Fappcontrol",[120],{"slug":121,"name":122,"problem":123},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",[125,129,133,137,140,143],{"kind":126,"label":127,"url":128},"advisories","Security Update Guide (MSRC)","https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide",{"kind":130,"label":131,"url":132},"research","Microsoft Threat Intelligence blog","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002Ftopic\u002Fthreat-intelligence\u002F",{"kind":134,"label":135,"url":136},"review","AV-TEST: business results for Microsoft Defender","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fmicrosoft\u002F",{"kind":134,"label":138,"url":139},"ITPro: Microsoft Defender for Business review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fcloud\u002Fcloud-security\u002Fmicrosoft-defender-for-business-review-feature-filled-enterprise-security-for-small-businesses",{"kind":134,"label":141,"url":142},"PeerSpot: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmicrosoft-defender-for-endpoint-reviews",{"kind":134,"label":144,"url":145},"Gartner Peer Insights: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmicrosoft-defender-for-endpoint",{"total":147,"stories":148},265,[149,154,159,164,169,173,178,183,188,193],{"slug":150,"title":151,"published_at":152,"brief":153},"managing-open-weight-model-risk-in-enterprise-deployments-e79b23","Managing open-weight model risk in enterprise deployments","2026-10-16T16:00:00+00:00","Microsoft and NVIDIA release guidance for managing open-weight AI model risks.",{"slug":155,"title":156,"published_at":157,"brief":158},"microsoft-seizes-yam-store-and-phishing-kit-domains-linked-to-1b-malicious-messa-e0d594","Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages","2026-10-15T10:34:53+00:00","Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI, and Iron Man services.",{"slug":160,"title":161,"published_at":162,"brief":163},"global-takedown-hits-network-behind-1-billion-phishing-messages-d21e2d","Global takedown hits network behind 1 billion phishing messages","2026-10-14T13:12:52+00:00","Global takedown disrupts cybercrime network behind 1 billion phishing messages.",{"slug":165,"title":166,"published_at":167,"brief":168},"the-hidden-network-inside-the-phishing-infrastructure-ecosystem-powering-global--213315","The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime","2026-10-14T13:00:00+00:00","Microsoft disrupts Chinese-language phishing kit ecosystem and illicit marketplace.",{"slug":170,"title":171,"published_at":167,"brief":172},"microsoft-disrupts-chinese-language-phishing-market-behind-1b-messages-69760c","Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages","Microsoft and Health-ISAC disrupt Chinese-language phishing market, seizing domains.",{"slug":174,"title":175,"published_at":176,"brief":177},"fbi-seizes-flax-typhoon-hacking-tools-linked-to-chinese-contractor-97d28a","FBI Seizes Flax Typhoon Hacking Tools Linked to Chinese Contractor","2026-10-08T23:09:07+00:00","FBI and DOJ seize domains and disrupt hacking tools used by China-linked Flax Typhoon.",{"slug":179,"title":180,"published_at":181,"brief":182},"post-quantum-authentication-why-organizations-should-start-testing-certificate-e-146958","Post-quantum authentication: Why organizations should start testing certificate ecosystems now","2026-10-08T20:44:28+00:00","Microsoft launches PQC TLS Pilot Program to test post-quantum authentication readiness.",{"slug":184,"title":185,"published_at":186,"brief":187},"3-lessons-from-frontier-ai-vulnerability-research-88f938","3 lessons from frontier AI vulnerability research","2026-10-07T16:00:00+00:00","Microsoft's FORGE Lab uses AI to find vulnerabilities in Windows and Linux.",{"slug":189,"title":190,"published_at":191,"brief":192},"ciso-perspectives-on-managing-vulnerability-risks-in-the-age-of-ai-9e9afd","CISO perspectives on managing vulnerability risks in the age of AI","2026-10-06T16:00:00+00:00","CISOs must balance rapid patching with accuracy as AI increases vulnerability findings.",{"slug":194,"title":195,"published_at":196,"brief":197},"clickfix-smuggles-payloads-through-browser-cache-to-bypass-windows-run-limits-fe8af1","ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits","2026-10-06T05:22:55+00:00","ClickFix attacks now smuggle payloads in browser cache to bypass Windows run limits.",{"total":199,"stories":200},645,[201,206,211,216,221,226,231,236,237,242],{"slug":202,"title":203,"published_at":204,"brief":205},"connectwise-suspends-cloud-backup-after-attackers-compromise-microsoft-365-tenan-1a74dd","ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants","2026-10-18T08:23:02+00:00","ConnectWise disables cloud backup after attackers compromise Microsoft 365 tenants.",{"slug":207,"title":208,"published_at":209,"brief":210},"hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack-622bd9","Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack","2026-10-17T15:18:51+00:00","Hackers compromised Microsoft 365 tenants via ConnectWise's Cloud Backup service.",{"slug":212,"title":213,"published_at":214,"brief":215},"microsoft-october-windows-update-may-break-smart-app-control-2afcc8","Microsoft: October Windows update may break Smart App Control","2026-10-16T08:44:22+00:00","Microsoft update KB5127648 may prevent Windows 11 users from enabling Smart App Control.",{"slug":217,"title":218,"published_at":219,"brief":220},"microsoft-patches-two-dozen-rce-flaws-in-office-0deebb","Microsoft Patches Two Dozen RCE Flaws in Office","2026-10-16T07:55:06+00:00","Microsoft releases patches for over 30 vulnerabilities, including two dozen RCE flaws in Office.",{"slug":222,"title":223,"published_at":224,"brief":225},"norwegian-dpa-fines-xandr-eur-8-600-000-for-unlawful-processing-of-personal-data-d1fefb","Norwegian DPA fines Xandr EUR 8 600 000 for unlawful processing of personal data","2026-10-16T07:52:03+00:00","Norwegian DPA fines Xandr EUR 8.6M for unlawful processing of sensitive personal data.",{"slug":227,"title":228,"published_at":229,"brief":230},"microsoft-fixes-bug-causing-windows-black-screens-explorer-crashes-56b460","Microsoft fixes bug causing Windows black screens, Explorer crashes","2026-10-15T09:10:20+00:00","Microsoft fixes Windows bug causing black screens and Explorer crashes.",{"slug":232,"title":233,"published_at":234,"brief":235},"microsoft-drops-an-actively-exploited-zero-day-among-record-high-of-1-413-vulner-6fb878","Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities","2026-10-14T17:42:11+00:00","Microsoft patched 1,413 vulnerabilities, including one actively exploited zero-day.",{"slug":160,"title":161,"published_at":162,"brief":163},{"slug":238,"title":239,"published_at":240,"brief":241},"microsoft-recent-windows-updates-may-trigger-remote-desktop-failures-f5ce88","Microsoft: Recent Windows updates may trigger Remote Desktop failures","2026-10-14T10:48:09+00:00","Windows updates may cause Remote Desktop failures for non-admin users with Administrator protection enabled.",{"slug":243,"title":244,"published_at":245,"brief":246},"microsoft-fixes-1-413-vulnerabilities-in-record-october-patch-tuesday-update-33fd0b","Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update","2026-10-14T08:23:05+00:00","Microsoft releases record-breaking October update, fixing 1,413 vulnerabilities, including an actively exploited",[248,251,253,256,259,261,263,265,269,272,274,276,278,280,282,284,286,288,290,292,294,295,299,300,301,306,310,311,315,316],{"type":249,"value":250,"article_slug":202,"article_title":203,"published_at":204},"malware","506e08f9-6e9a-4da4-942b-a099a03644ae",{"type":249,"value":252,"article_slug":202,"article_title":203,"published_at":204},"ConnectWise Cloud Backup",{"type":254,"value":255,"article_slug":207,"article_title":208,"published_at":209},"ip","144.172.64.128",{"type":257,"value":258,"article_slug":207,"article_title":208,"published_at":209},"mitre_attack","T1078",{"type":257,"value":260,"article_slug":207,"article_title":208,"published_at":209},"T1078.004",{"type":257,"value":262,"article_slug":207,"article_title":208,"published_at":209},"T1136.003",{"type":257,"value":264,"article_slug":207,"article_title":208,"published_at":209},"T1558.003",{"type":249,"value":252,"article_slug":266,"article_title":267,"published_at":268},"hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-t-614eb3","Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants","2026-10-17T06:16:46+00:00",{"type":270,"value":271,"article_slug":232,"article_title":233,"published_at":234},"cve","CVE-2026-96951",{"type":249,"value":273,"article_slug":160,"article_title":161,"published_at":162},"CoGUI",{"type":249,"value":275,"article_slug":160,"article_title":161,"published_at":162},"Haozi",{"type":249,"value":277,"article_slug":160,"article_title":161,"published_at":162},"Iron Man System",{"type":249,"value":279,"article_slug":160,"article_title":161,"published_at":162},"Storm-2990",{"type":249,"value":281,"article_slug":160,"article_title":161,"published_at":162},"Storm-3119",{"type":270,"value":283,"article_slug":243,"article_title":244,"published_at":245},"CVE-2026-102866",{"type":270,"value":285,"article_slug":243,"article_title":244,"published_at":245},"CVE-2026-105016",{"type":270,"value":287,"article_slug":243,"article_title":244,"published_at":245},"CVE-2026-108398",{"type":270,"value":289,"article_slug":243,"article_title":244,"published_at":245},"CVE-2026-65674",{"type":270,"value":291,"article_slug":243,"article_title":244,"published_at":245},"CVE-2026-70242",{"type":270,"value":293,"article_slug":243,"article_title":244,"published_at":245},"CVE-2026-92707",{"type":270,"value":271,"article_slug":243,"article_title":244,"published_at":245},{"type":270,"value":287,"article_slug":296,"article_title":297,"published_at":298},"microsoft-patches-record-1-413-vulnerabilities-including-exploited-windows-zero--36dc6a","Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day","2026-10-14T07:16:12+00:00",{"type":270,"value":293,"article_slug":296,"article_title":297,"published_at":298},{"type":270,"value":271,"article_slug":296,"article_title":297,"published_at":298},{"type":270,"value":302,"article_slug":303,"article_title":304,"published_at":305},"CVE-2024-21348","microsoft-patches-record-1-413-flaws-including-exploited-windows-shell-bug-9917fb","Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug","2026-10-14T04:34:43+00:00",{"type":270,"value":287,"article_slug":307,"article_title":308,"published_at":309},"microsoft-patches-more-than-1-400-security-flaws-0fbd64","Microsoft Patches More Than 1,400 Security Flaws","2026-10-13T23:24:53+00:00",{"type":270,"value":271,"article_slug":307,"article_title":308,"published_at":309},{"type":270,"value":287,"article_slug":312,"article_title":313,"published_at":314},"microsoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days-6d5f00","Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days","2026-10-13T19:56:09+00:00",{"type":270,"value":293,"article_slug":312,"article_title":313,"published_at":314},{"type":270,"value":271,"article_slug":312,"article_title":313,"published_at":314},1490,[319,323,327,331,335,339],{"month":320,"reported":321,"affected":322},"2026-05-01",44,115,{"month":324,"reported":325,"affected":326},"2026-06-01",40,94,{"month":328,"reported":329,"affected":330},"2026-07-01",31,96,{"month":332,"reported":333,"affected":334},"2026-08-01",32,82,{"month":336,"reported":337,"affected":338},"2026-09-01",46,89,{"month":340,"reported":341,"affected":325},"2026-10-01",18]