Microsoft Security

Microsoft Security

Sign in

Microsoft security intelligence

Security research and threat intelligence from our global network of security experts.

Doctor accessing a patients details using a touch screen computer in a clinic.

March 17, 2023 • 6 min read

KillNet and affiliate hacktivist groups targeting healthcare with DDoS attacks

KillNet, a group that the US Department of Health and Human Services (DHHS) has called pro-Russia hacktivists, has been launching waves of attacks targeting governments and companies with focus on the healthcare sector. In this blog post, we provide an overview of the DDoS attack landscape against healthcare applications hosted in Azure over three months.

a man standing in front of a computer

March 13, 2023 • 7 min read

DEV-1101 enables high-volume AiTM campaigns with open-source phishing kit

DEV-1101 is an actor tracked by Microsoft responsible for the development, support, and advertising of several AiTM phishing kits, including an open-source kit capable of circumventing MFA through reverse-proxy functionality.

a person standing in front of a building

March 6, 2023 • 6 min read

Protecting Android clipboard content from unintended exposure

Microsoft discovered that the SHEIN Android application periodically read the contents of the Android device clipboard and, if a particular pattern was present, sent the contents of the clipboard to a remote server.

Male office worker standing in modern office and using large touchscreen monitor with right hand (screen shows open browser window).

March 2, 2023 • 10 min read

New research, tooling, and partnerships for more secure AI and machine learning

At Microsoft, we’ve been working on the challenges and opportunities of AI for years. Today we’re sharing some recent developments so that the community can be better informed and better equipped for a new world of AI exploration.

a person sitting at a table using a laptop computer

February 21, 2023 • 6 min read

2022 in review: DDoS attack trends and insights

With DDoS attacks becoming more frequent, sophisticated, and inexpensive to launch, it’s important for organizations of all sizes to be proactive and stay protected. In this blog, we detail trends and insights into DDoS attacks we observed and mitigated throughout 2022.

A female architect sitting at an office desk showing Windows 365 and its Welcome screen on dual desktop monitors. Shown on Windows 11.

January 26, 2023 • 16 min read

Introducing kernel sanitizers on Microsoft platforms

We share technical details of our work on the AddressSanitizer (ASAN) and how it contributes to durably improving software quality and security at Microsoft.

A man standing in their workstation with multiple computer screens.

December 21, 2022 • 12 min read

Microsoft research uncovers new Zerobot capabilities

The Microsoft Defender for IoT research team details information on the recent distribution of a Go-based botnet, known as Zerobot, that spreads primarily through IoT and web-application vulnerabilities.

December 19, 2022 • 9 min read

Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability

Microsoft discovered a vulnerability in macOS, referred to as “Achilles”, allowing attackers to bypass application execution restrictions enforced by the Gatekeeper security mechanism.

Male first line worker using laptop folded open as tablet, standing on home furnishings sales floor, looking at a wall-mounted customer support monitor which displays an advertisement for bedding. A desktop monitor sits on a desk behind him.

December 15, 2022 • 8 min read

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

The Microsoft Defender for IoT research team analyzed a cross-platform botnet that infects both Windows and Linux systems from PCs to IoT devices, to launch distributed denial of service (DDoS) attacks against private Minecraft servers.

female developer wearing headphones; coding at her PC workspace in an enterprise office, using Visual Studio on a multi-monitor set up.

December 12, 2022 • 10 min read

IIS modules: The evolution of web shells and how to detect them

This blog aims to provide further guidance on detecting malicious IIS modules and other capabilities that you can use during your own incident response investigations.

a person sitting at a table using a laptop computer

December 7, 2022 • 4 min read

Mitigate threats with the new threat matrix for Kubernetes

The updated threat matrix for Kubernetes comes in a new format that simplifies usage of the knowledge base and with new content to help mitigate threats.

a person sitting on a bench in front of a window

December 6, 2022 • 17 min read

DEV-0139 launches targeted attacks against the cryptocurrency industry

Microsoft security researchers investigate an attack where the threat actor, tracked DEV-0139, used chat groups to target specific cryptocurrency investment companies and run a backdoor within their network.

1
2
3
…
26
Next Page