Microsoft Threat Intelligence @MsftSecIntel

We are Microsoft's global network of security experts. Follow for security research and threat intelligence. aka.ms/threatintelblog Redmond, WA Joined November 2010

Tweets

6K
Followers

187K
Following

1K
Likes

2K

Microsoft Threat Intelligence @MsftSecIntel

a day ago

Threat actors seek to abuse Microsoft Teams features and capabilities at different points along the attack chain, raising the stakes for defenders to proactively monitor, detect, and respond. msft.it/6015sLUrP Read our latest blog to get extensive recommendations for…

1 28 83 13K 46

Microsoft Threat Intelligence @MsftSecIntel

2 days ago

Storm-1175, a financially motivated threat actor known for deploying Medusa ransomware, was observed exploiting the CVE-2025-10035 vulnerability in GoAnywhere MFT's License Servlet. Read our analysis and get detection and hunting guidance: msft.it/6018sIfKr

1 34 114 17K 33

Microsoft Threat Intelligence @MsftSecIntel

a week ago

Users looking to create, publish, and test agents in Security Copilot using natural language, agent builder forms, YAMLs, and MCP can get more info and guidance from the Microsoft Security Copilot developer content: msft.it/6010svulk.

2 5 14 7K 12

Microsoft Threat Intelligence @MsftSecIntel

a week ago

The nature of incident response is its chaos, and Microsoft Incident Response (IR) team thrives amid disorder, stepping in when environments are compromised and confidence is shaken. msft.it/6016svfZK According to Adrian Hill, lead investigator for Microsoft IR, the…

3 9 36 11K 19

Download Video

Microsoft Security @msftsecurity

a week ago

From graph-based context to build-your-own Microsoft Security Copilot agents, we're introducing a new AI-ready security platform and innovations to empower defenders in the era of agentic AI: msft.it/6010sQNtI #MSSecure

15 32 110 67K 31

Download Video

Microsoft Security @msftsecurity

2 weeks ago

Don’t miss your chance to join these speakers for the latest solutions to your end-to-end security platforms. Register today! msft.it/6010sqUgO #MSSecure #SecurityforAI

3 8 21 19K 10

Microsoft Threat Intelligence @MsftSecIntel

2 weeks ago

Microsoft Threat Intelligence has uncovered a new variant of the XCSSET malware, which is designed to infect Xcode projects, typically used by software developers building Apple or macOS-related applications. msft.it/6019sS0yx This new XCSSET variant improves browser…

11 27 96 25K 27

Microsoft Threat Intelligence @MsftSecIntel

2 weeks ago

Attackers are leveraging AI and bots to create phishing campaigns that are more tailored than ever. Using these tools for domain impersonation, typosquatting, etc., attackers can tailor a phishing attack directly to one individual – and do that at scale. msft.it/6017sSdRU…

3 16 50 10K 27

Microsoft Threat Intelligence @MsftSecIntel

2 weeks ago

Microsoft Threat Intelligence recently detected and blocked a credential phishing campaign that likely leveraged AI-generated code to obfuscate its payload and evade traditional defenses. msft.it/6019sSBmS The campaign, though limited in scope, demonstrates how attackers…

5 35 99 41K 36

Microsoft Threat Intelligence @MsftSecIntel

2 weeks ago

GitHub is strengthening npm security with stricter authentication, granular tokens, and enhanced trusted publication. This is in response to the surge of account takeovers on package registries like npm. msft.it/6018sqQ2a In these attacks, threat actors gain unauthorized…

1 29 78 11K 22

Microsoft Threat Intelligence @MsftSecIntel

3 weeks ago

"Microsoft Threat Intelligence is fully focused on disrupting threat actor activity." In the first of a four-part Inside Microsoft Threat Intelligence miniseries, Director of Threat Intelligence Strategy @sherrod_im gives a behind-the-scenes look at how Microsoft's Digital…