#microsoftsecurity — Public Fediverse posts

https://winbuzzer.com/2026/07/28/microsoft-says-cyber-ai-can-cut-bug-finding-costs-xcxwbn/

Microsoft says its new MAI-Cyber-1-Flash AI model can lower bug-finding costs by routing routine work in its multi-model agentic scanning harness, while its Project Perception is due in public preview August 3.

#AI #MAICyber1Flash #ProjectPerception #Microsoft #MicrosoftAI #MicrosoftSecurity #AIModels #AIAgents #AgenticAI #Cybersecurity

https://winbuzzer.com/2026/07/28/microsoft-says-cyber-ai-can-cut-bug-finding-costs-xcxwbn/

Microsoft says its new MAI-Cyber-1-Flash AI model can lower bug-finding costs by routing routine work in its multi-model agentic scanning harness, while its Project Perception is due in public preview August 3.

#AI #MAICyber1Flash #ProjectPerception #Microsoft #MicrosoftAI #MicrosoftSecurity #AIModels #AIAgents #AgenticAI #Cybersecurity

https://winbuzzer.com/2026/07/21/microsoft-warns-of-increased-acr-stealer-activity-xcxwbn/

Microsoft warns that increased ACR Stealer activity uses ClickFix, WebDAV, and MSHTA routes to steal enterprise credentials, tokens, and cloud documents.

#AcrStealer #ClickFix #Microsoft #Malware #CyberThreats #Cyberattacks #MicrosoftDefender #MicrosoftSecurity #Microsoft365

https://winbuzzer.com/2026/07/21/microsoft-warns-of-increased-acr-stealer-activity-xcxwbn/

Microsoft warns that increased ACR Stealer activity uses ClickFix, WebDAV, and MSHTA routes to steal enterprise credentials, tokens, and cloud documents.

#AcrStealer #ClickFix #Microsoft #Malware #CyberThreats #Cyberattacks #MicrosoftDefender #MicrosoftSecurity #Microsoft365

https://winbuzzer.com/2026/07/18/microsoft-security-overhaul-reportedly-brings-hundreds-of-la-xcxwbn/

Microsoft is consolidating its security-engineering roles with several hundred layoffs as teams shift toward AI defenses and Security Copilot work.

#AI #MicrosoftSecurity #Microsoft #MicrosoftSecurityCopilot #Layoffs #TechLayoffs #AIStrategy

https://winbuzzer.com/2026/07/18/microsoft-security-overhaul-reportedly-brings-hundreds-of-la-xcxwbn/

Microsoft is consolidating its security-engineering roles with several hundred layoffs as teams shift toward AI defenses and Security Copilot work.

#AI #MicrosoftSecurity #Microsoft #MicrosoftSecurityCopilot #Layoffs #TechLayoffs #AIStrategy

https://winbuzzer.com/2026/07/02/microsoft-speeds-quantum-safe-roadmap-toward-2029-xcxwbn/

Microsoft's quantum-safe roadmap targets 2029 as customers face quantum-resistant cryptography planning, data-exposure risk, and migration pressure.

#MicrosoftSecurity #Microsoft #PostQuantumCryptography #QuantumComputing #Encryption #Cybersecurity

https://winbuzzer.com/2026/07/02/microsoft-speeds-quantum-safe-roadmap-toward-2029-xcxwbn/

Microsoft's quantum-safe roadmap targets 2029 as customers face quantum-resistant cryptography planning, data-exposure risk, and migration pressure.

#MicrosoftSecurity #Microsoft #PostQuantumCryptography #QuantumComputing #Encryption #Cybersecurity

Audit everything. Turn on Azure Activity Logs and stream to Sentinel for full visibility. https://aka.ms/AzureLogs #Compliance #MicrosoftSecurity
KQL: AzureActivity | where OperationNameValue contains "Delete" | project Caller, ResourceGroup

https://winbuzzer.com/2026/06/30/microsoft-details-edge-security-controls-for-shadow-ai-xcxwbn/

Microsoft has improved Edge for Business controls for shadow AI, data loss prevention, contractors, extensions, and scareware.

#AI #EdgeForBusiness #MicrosoftEdge #Microsoft #ShadowAI #MicrosoftSecurity #Cybersecurity

https://winbuzzer.com/2026/06/30/microsoft-details-edge-security-controls-for-shadow-ai-xcxwbn/

Microsoft has improved Edge for Business controls for shadow AI, data loss prevention, contractors, extensions, and scareware.

#AI #EdgeForBusiness #MicrosoftEdge #Microsoft #ShadowAI #MicrosoftSecurity #Cybersecurity

Enable Insider Risk Management in Microsoft Purview. https://aka.ms/InsiderRisk #Compliance #MicrosoftSecurity

https://winbuzzer.com/2026/06/11/microsoft-fixes-windows-server-2025-bitlocker-recovery-bug-xcxwbn/

Microsoft has fixed a Windows Server 2025 BitLocker recovery bug, giving IT admins mitigation paths for affected systems at restart.

#WindowsServer2025 #BitLocker #Microsoft #WindowsServer #WindowsUpdate #MicrosoftWindows #SecurityPatches #MicrosoftSecurity #WindowsSecurity #Encryption #Enterprise

https://winbuzzer.com/2026/06/11/microsoft-fixes-windows-server-2025-bitlocker-recovery-bug-xcxwbn/

Microsoft has fixed a Windows Server 2025 BitLocker recovery bug, giving IT admins mitigation paths for affected systems at restart.

#WindowsServer2025 #BitLocker #Microsoft #WindowsServer #WindowsUpdate #MicrosoftWindows #SecurityPatches #MicrosoftSecurity #WindowsSecurity #Encryption #Enterprise

Kill legacy protocols. Disable SMBv1 and enforce TLS 1.2+. https://aka.ms/TLSConfig #MicrosoftSecurity #NetworkSecurity

via #Microsoft : AI alone won’t change your business. The system running it will.

https://ift.tt/lQryEzF
#AI #EnterpriseAI #AgentPlatform #AIForBusiness #Microsoft #Foundry #GitHub #MicrosoftIQ #Azure #Entra #Purview #Defender #MicrosoftSecurity #Microsoft365 #Teams #Windows …

via #Microsoft : AI alone won’t change your business. The system running it will.

https://ift.tt/lQryEzF
#AI #EnterpriseAI #AgentPlatform #AIForBusiness #Microsoft #Foundry #GitHub #MicrosoftIQ #Azure #Entra #Purview #Defender #MicrosoftSecurity #Microsoft365 #Teams #Windows …

Enable Defender for Endpoint EDR in block mode for proactive threat disruption & integration with other Defender tools. https://aka.ms/DefenderEndpoint #EndpointSecurity #MicrosoftSecurity

https://winbuzzer.com/2026/05/21/microsoft-alert-emails-abused-to-deliver-scam-links-xcxwbn/

Scammers are abusing Microsoft's trusted account-notification email channel to send spam or phishing links that can look like legitimate Microsoft alerts.

#MicrosoftAccount #Microsoft #Cybersecurity #Cybercrime #PhishingAttacks #MicrosoftSecurity #ExchangeOnline

https://winbuzzer.com/2026/05/21/microsoft-alert-emails-abused-to-deliver-scam-links-xcxwbn/

Scammers are abusing Microsoft's trusted account-notification email channel to send spam or phishing links that can look like legitimate Microsoft alerts.

#MicrosoftAccount #Microsoft #Cybersecurity #Cybercrime #PhishingAttacks #MicrosoftSecurity #ExchangeOnline

Detect impossible travel. Configure Identity Protection risk policies. https://aka.ms/IdentityProtection #ZeroTrust #MicrosoftSecurity
KQL: SigninLogs | where RiskLevelDuringSignIn == "high" and LocationDetails !contains "expected"

Audit privileged actions. Stream Azure AD audit logs to Sentinel for full visibility. https://aka.ms/AuditLogs #SOC #MicrosoftSecurity
KQL: AuditLogs | where ActivityDisplayName contains "Add member to role" | project InitiatedBy, Result

AI-powered defense for an AI-accelerated threat landscape https://www.yayafa.com/2799125/ #AgenticAi #AI #ArtificialGeneralIntelligence #ArtificialIntelligence #Copilot #Microsoft #MicrosoftAI #MicrosoftCopilot #MicrosoftDefender #MicrosoftSecurity #エージェント型AI #人工知能 #汎用人工知能

AI-powered defense for an AI-accelerated threat landscape https://www.yayafa.com/2799125/ #AgenticAi #AI #ArtificialGeneralIntelligence #ArtificialIntelligence #Copilot #Microsoft #MicrosoftAI #MicrosoftCopilot #MicrosoftDefender #MicrosoftSecurity #エージェント型AI #人工知能 #汎用人工知能

Secure CI/CD pipelines. Scan IaC templates with Defender for Cloud before deployment. https://aka.ms/IaCSecurity #DevSecOps #MicrosoftSecurity

Protect your business data with smarter security strategies! 🔐 Learn how sensitivity labels and data protection policies help safeguard confidential information, ensure compliance, and reduce risks across your organization. Discover practical insights to strengthen your Microsoft security framework and improve governance.
Read the full blog now : https://www.exinent.com/sensitivity-labels-data-protection-policies/
#Exinent #DataProtection #CyberSecurity #MicrosoftSecurity #InformationSecurity #Compliance #CloudSecurity #SensitivityLabels

Block risky sign-ins. Configure risk-based Conditional Access with Identity Protection. Remember to consider devices & users! https://aka.ms/IdentityProtection #ZeroTrust #MicrosoftSecurity

https://winbuzzer.com/2026/04/10/fbi-disrupts-russian-dns-hijack-network-targeting-microsoft-xcxwbn/

FBI Disrupts Russian DNS Hijack Network Targeting Microsoft 365

#Microsoft #Microsoft365 #Russia #Routers #Cybersecurity #CyberThreats #Malware #Cyberespionage #Hackers #MicrosoftSecurity #ThreatActors #Hacking #SecurityThreats #Authentication #Cyberattacks

https://winbuzzer.com/2026/04/10/fbi-disrupts-russian-dns-hijack-network-targeting-microsoft-xcxwbn/

FBI Disrupts Russian DNS Hijack Network Targeting Microsoft 365

#Microsoft #Microsoft365 #Russia #Routers #Cybersecurity #CyberThreats #Malware #Cyberespionage #Hackers #MicrosoftSecurity #ThreatActors #Hacking #SecurityThreats #Authentication #Cyberattacks

Secure AI prompts. Use Microsoft Copilot security controls to prevent prompt injection attacks. https://aka.ms/CopilotSecurity #AIsecurity #MicrosoftSecurity

Secure AI prompts. Use Microsoft Copilot security controls to prevent prompt injection attacks. https://aka.ms/CopilotSecurity #AIsecurity #MicrosoftSecurity

クラウド環境の破壊型サイバー攻撃に備えるために Microsoft Entra ID のネイティブバックアップを試してみる
https://qiita.com/hirotomotaguchi/items/e92b4c5c5c2c9dfa4c7b?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #Azure #Microsoft365 #EntraID #MicrosoftEntra #MicrosoftSecurity

https://winbuzzer.com/2026/03/11/microsoft-entra-passkeys-windows-phishing-resistant-sign-in-xcxwbn/

Microsoft Entra Passkeys Bring Phishing-Resistant Windows Sign-In

#Microsoft #MicrosoftEntra #MicrosoftEntraID #Cybersecurity #Authentication #Passwordless #CloudSecurity #MicrosoftSecurity #WindowsSecurity #Microsoft365 #EntraPasskeys

https://winbuzzer.com/2026/03/11/microsoft-entra-passkeys-windows-phishing-resistant-sign-in-xcxwbn/

Microsoft Entra Passkeys Bring Phishing-Resistant Windows Sign-In

#Microsoft #MicrosoftEntra #MicrosoftEntraID #Cybersecurity #Authentication #Passwordless #CloudSecurity #MicrosoftSecurity #WindowsSecurity #Microsoft365 #EntraPasskeys

Don’t skip JIT access. Just-In-Time VM access reduces attack surface by closing RDP/SSH ports until needed. https://aka.ms/JITAccess #ZeroTrust #MicrosoftSecurity

https://winbuzzer.com/2026/02/09/microsoft-exchange-online-flags-legitimate-emails-phishing-xcxwbn/

Microsoft Exchange Online Falsely Flags Legitimate Emails as Phishing

#ExchangeOnline #Microsoft #Cybersecurity #Security #MicrosoftExchange #PhishingAttacks #BigTech #Email #MicrosoftSecurity #Cloud #Phishing #MicrosoftCloud

https://winbuzzer.com/2026/02/09/microsoft-exchange-online-flags-legitimate-emails-phishing-xcxwbn/

Microsoft Exchange Online Falsely Flags Legitimate Emails as Phishing

#ExchangeOnline #Microsoft #Cybersecurity #Security #MicrosoftExchange #PhishingAttacks #BigTech #Email #MicrosoftSecurity #Cloud #Phishing #MicrosoftCloud

Secure your supply chain. Integrate Defender for Cloud with GitHub Advanced Security to catch vulnerabilities at commit time. #DevSecOps #MicrosoftSecurity

Start 2026 strong with #ZeroTrust! Enforce MFA for every identity, including service accounts. It blocks 99% of credential attacks. #MicrosoftSecurity #Azure

RE: https://infosec.exchange/@franklesniak/115572191076370399

#ActiveDirectory #EntraID #IdentityManagement #AccessManagement #IdentitySecurity #ZeroTrust #GroupPolicy #ConditionalAccess #PrivilegedIdentity #PrivilegedIdentityManagement #PrivilegedAccessManagement #MicrosoftSecurity #PingCastle #PurpleKnight #Maester #DigitalIdentity

RE: https://infosec.exchange/@franklesniak/115572191076370399

#ActiveDirectory #EntraID #IdentityManagement #AccessManagement #IdentitySecurity #ZeroTrust #GroupPolicy #ConditionalAccess #PrivilegedIdentity #PrivilegedIdentityManagement #PrivilegedAccessManagement #MicrosoftSecurity #PingCastle #PurpleKnight #Maester #DigitalIdentity

Microsoft is retiring Defender Application Guard, and now it's time for a security reboot. Discover how layered defenses like ASR rules, WDAC, and Zero Trust are stepping up to keep your data safe in a new era of cyber threats.

https://thedefendopsdiaries.com/strengthening-security-after-defender-application-guard-retirement-microsoft-recommended-alternatives/

#defenderapplicationguard
#microsoftsecurity
#attackreduction
#zerotrust
#cloudappsecurity

Microsoft Edge Now Syncs Passkeys Across Windows Devices, Bolstering Passwordless Push

#Microsoft #MicrosoftEdge #Passkeys #Cybersecurity #Passwordless #Windows11 #Authentication #DigitalIdentity #Privacy #MicrosoftSecurity #BigTech

https://winbuzzer.com/2025/11/04/microsoft-edge-now-syncs-passkeys-across-windows-devices-bolstering-passwordless-push-xcxwbn

Overlooked WSUS configurations could be your network's Achilles' heel—hackers can seize SYSTEM-level control with zero user input. Microsoft's rapid patch is out. Is your server safe?

https://thedefendopsdiaries.com/critical-wsus-vulnerability-cve-2025-59287-immediate-action-required-to-prevent-network-wide-attacks/

#wsus
#cve202559287
#windowsserver
#remotecodeexecution
#cybersecurity
#patchmanagement
#networksecurity
#microsoftsecurity
#zeroday

One click in File Explorer could have given hackers access to your credentials—until Microsoft's new update shut it down. Curious how this simple tweak is tightening Windows security?

https://thedefendopsdiaries.com/microsoft-disables-file-explorer-preview-pane-for-downloads-to-block-ntlm-credential-theft/

#microsoftsecurity
#ntlmtheft
#windowsupdate
#credentialprotection
#cyberthreats

ASP.NET Core's worst nightmare just became reality—a flaw so severe it lets attackers bypass your defenses and hijack sessions. Could your server be at risk?

https://thedefendopsdiaries.com/cve-2025-55315-the-highest-severity-aspnet-core-flaw-and-its-implications/

#cve202555315
#aspnetcore
#httprequestsmuggling
#websecurity
#microsoftsecurity

Microsoft’s October update wasn’t just routine—it shut down 6 zero-day loopholes, with some already in play. And with free Windows 10 updates ending, the pressure is on. Is your system ready?

https://thedefendopsdiaries.com/microsoft-october-2025-patch-tuesday-six-zero-days-fixed-as-windows-10-support-ends/

#patchtuesday
#zeroday
#windows10
#cybersecurity
#microsoftsecurity

The God Mode Vulnerability That Should Kill "Trust Microsoft" Forever

https://tide.org/blog/god-mode-vulnerability-microsoft-authorityless-security

#HackerNews #GodMode #Vulnerability #TrustMicrosoft #CyberSecurity #MicrosoftSecurity #VulnerabilityAlert

Nederlandse Dirk-jan ontdekt cruciaal probleem in beveiliging Microsoft: https://www.rtl.nl/nieuws/economie/artikel/5529832/nederlandse-hacker-ontdekt-cruciaal-beveiligingsprobleem-bij

"Toegang tot mail, cloudopslag en servers van miljoenen bedrijven!
Ik kon zomaar namens hen handelen.." #MicrosoftSecurity #cybersafety

Big Tech Unites to End Hacker Name Chaos with Unified Cyber Glossary.

Microsoft, Google, Crowd Strike, and Palo Alto Networks are building a shared glossary of hacker group names to cut alias confusion and boost global cyber threat coordination.

#CyberSecurity
#HackerGlossary
#ThreatIntel
#MicrosoftSecurity
#GoogleCybersecurity
#CrowdStrike
#PaloAltoNetworks
#APTGroups

Read Full article from here : https://www.techi.com/tech-giants-unite-cyber-threat-glossary-simplify-hacker-names/

🔐 Microsoft’s April 2025 update to the Cybersecurity Reference Architecture (MCRA) is a must-read for security leaders.

This comprehensive guide offers:
🧠 Expanded role of Security Copilot beyond traditional SecOps
🔑 Integration of Entra Verified ID and passkeys for enhanced identity management
📊 Transition from Secure Score to Exposure Management for better risk assessment
📈 Updated threat intelligence processing over 78 trillion signals daily

The MCRA serves as a blueprint for implementing Zero Trust principles across diverse environments, including multicloud, IoT, and operational technology.
#CyberSecurity #ZeroTrust #MCRA #MicrosoftSecurity #security #privacy #cloud #infosec
https://learn.microsoft.com/en-us/security/adoption/mcra

Microsoft Security Copilot Gets New Tooling  – Source: securityboulevard.com https://ciso2ciso.com/microsoft-security-copilot-gets-new-tooling-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #CyberSecurityNews #Microsoftsecurity #SecurityBoulevard #SponsoredContent #SocialFacebook #SocialLinkedIn #@TechFieldDay #Cybersecurity #TFDShowcase #Microsoft #SocialX

Microsoft's Security Copilot now features AI agents designed to autonomously handle high-volume security tasks

#AI #Microsoft #MicrosoftSecurity #AIAgents #Cybersecurity #SecurityCopilot #AIinCybersecurity #CybersecurityUpdates

https://winbuzzer.com/2025/03/24/microsoft-expands-security-copilot-with-ai-agents-to-automate-cyber-defense-xcxwbn/

Malware Campaign Exploits GitHub, Infecting Nearly One Million Devices

#Cybersecurity #GitHub #GitHubSecurity #Malware #CyberCrime #MicrosoftSecurity #OpenSourceSecurity #CyberAttacks #GitHubMalware

https://winbuzzer.com/2025/03/10/malware-campaign-exploits-github-infecting-nearly-one-million-devices-xcxwbn/

Microsoft Ends DES Encryption in Windows 11 24H2 and Server 2025, Pushing Enterprises to Upgrade

#Cybersecurity #Windows11 #WindowsServer #AES #DES #Kerberos #Microsoft #Encryption #DataProtection #EnterpriseIT #MicrosoftSecurity #WindowsSecurity #Authentication

https://winbuzzer.com/2025/03/01/microsoft-ends-des-encryption-in-windows-11-24h2-and-server-2025-pushing-enterprises-to-upgrade-xcxwbn/

Windows Server 2025, security baseline http://dlvr.it/TJBk2M #WindowsServer2025 #MicrosoftSecurity #SecurityBaseline #SysAdmin