Rabia Noureen

Microsoft is making Linux security compliance significantly easier by bringing CIS Benchmark auditing directly into Microsoft Azure. This new feature gives organizations a built-in way to continuously assess and track security posture across cloud and hybrid environments. CIS Security Benchmarks are a set of globally recognized security best practices designed to help organizations securely configure…

Microsoft has introduced a new Exposure Resolution dashboard experience in Microsoft Security Exposure Management. This new feature is designed to help security teams focus on the most important risks instead of sorting through large volumes of findings and disconnected dashboards. Security teams are overwhelmed by a growing number of vulnerabilities, exposure findings, and security alerts…

Cybercriminals are exploiting Microsoft Teams voice phishing (vishing) campaigns to infiltrate corporate networks and deploy Chaos ransomware. Security researchers warn that the campaign targeted dozens of organizations between February and June 2026. According to a new report from Sophos, this campaign (tracked as STAC474) focused mainly on organizations in the United States and Canada. It…

Microsoft is investigating two issues affecting Microsoft Defender for Endpoint on Linux, including a newly confirmed bug that could leave some systems without active threat protection after a reboot. The issue may expose affected Linux devices to potential security risks. According to Microsoft, Defender for Endpoint on Linux may stop working after an upgrade or…

Microsoft’s July Intune update introduces several improvements to simplify day-to-day device management. This release includes enhanced Windows sync visibility, custom compliance settings for macOS, and improved control over Samsung firmware updates. The Microsoft Intune admin center now provides a more transparent sync process for individual Windows devices. This update allows administrators to monitor sync progress…

Microsoft has integrated Microsoft Defender capabilities into the Agent 365 ecosystem to monitor AI agents in real time as they execute tasks. This enables security teams to evaluate agent behavior continuously, rather than relying solely on pre-deployment testing or static security reviews. Microsoft highlighted that AI agents can act on their own, which involves accessing…

Microsoft has launched Project Perception, a new AI-powered cybersecurity platform designed to identify vulnerabilities before attackers can exploit them. The platform continuously detects risks, reasons across complex environments, and helps organizations take proactive action to strengthen their security posture. Microsoft mentioned that traditional security tools and human-led processes cannot keep pace with the speed, scale,…

Microsoft has disclosed that a major outage in its West US Azure region (California) was caused by an error during routine network maintenance. The incident disrupted access to Azure and several other Microsoft cloud services for customers in the affected region. In its preliminary post-incident review report, Microsoft mentioned that the outage began at 14:44…

Microsoft has addressed a critical vulnerability in Microsoft Azure Automation. This security flaw could allow attackers to gain elevated privileges and potentially access resources belonging to other Azure tenants. Azure Automation is a cloud service that helps organizations automate repetitive IT and operational tasks without requiring constant manual intervention. It enables teams to create and…

AI agents have rapidly entered the enterprise mainstream, but the systems that provide them with trusted business context and content have not evolved at the same pace. As organizations race to deploy AI at scale, many are discovering that effective governance, connected knowledge, and flexible infrastructure are the real factors determining success. Cloud content management…

As cyber threats continue to evolve, Microsoft is strengthening Windows activation security by extending protection beyond software and into the hardware layer. The new KMS Hardware-Secured feature uses TPM-based attestation to ensure that activation servers are running on trusted, uncompromised hardware before they can activate Windows devices. Key Management Service (KMS) is a volume activation…

Group-IB researchers have discovered HOLLOWGRAPH, a sophisticated malware linked with high confidence to the Cavern cyber-espionage framework. The malware abuses legitimate Microsoft 365 services to conceal its command-and-control (C2) communications. According to Group-IB researchers, HOLLOWGRAPH leverages the Microsoft Graph API to interact with a compromised Microsoft 365 mailbox. Attackers place commands inside calendar events, and…