Recent Advisories

Severity ID Title Vendor Product Date Type
NONE MSSECURE:71A6A5...

SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks_MSSECURE:71A6A562B502B713CEEA06A6D6AC28B0

In this article 1. DNS hijacking attack chain: From compromised devices to AiTM and other follow-on activity 2. Mitigation and protection guid...

N/A N/A MSSECURE
NONE MSSECURE:C92382...

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk_MSSECURE:C92382EF3EC9E2288D9869F686C19B20

In this article 1. Technical details 2. Disclosure timeline 3. Mitigation and protection guidance 4. References 5. Learn more During ...

N/A N/A MSSECURE
HIGH 8.7 MSSECURE:1F2FE0...

Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees_MSSECURE:1F2FE00123BED7D6F75CBA1B50147B51

In this article 1. Storm-2755’s attack chain 2. Defending against Storm-2755 and AiTM campaigns 3. Microsoft Defender detection and hunting ...

N/A N/A MSSECURE
HIGH 8.7 MSSECURE:BEAD60...

Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees_MSSECURE:BEAD606A6BFC3E71042572131CFAF206

In this article 1. Storm-2755’s attack chain 2. Defending against Storm-2755 and AiTM campaigns 3. Microsoft Defender detection and hunting ...

N/A N/A MSSECURE
NONE MSSECURE:F9CAFC...

The agentic SOC—Rethinking SecOps for the next decade_MSSECURE:F9CAFC1C42F3DA7232EEB0DD20981D9E

Every major shift in cyberattacker behavior over the past decade has followed a meaningful shift in how defenders operate. When security operation ...

N/A N/A MSSECURE
NONE MSSECURE:356546...

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk_MSSECURE:3565466EE661431E6D6FB3009757C720

In this article 1. Technical details 2. Disclosure timeline 3. Mitigation and protection guidance 4. References 5. Learn more During ...

N/A N/A MSSECURE
NONE MSSECURE:8A2137...

The agentic SOC—Rethinking SecOps for the next decade_MSSECURE:8A2137AB6AB21DF1E7893FB301AEF01C

Every major shift in cyberattacker behavior over the past decade has followed a meaningful shift in how defenders operate. When security operation ...

N/A N/A MSSECURE
NONE MSSECURE:DF0724...

Running OpenClaw safely: identity, isolation, and runtime risk_MSSECURE:DF072410772BC0F4815EA1AC2D112877

Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited bu...

N/A N/A MSSECURE
NONE MSSECURE:13D159...

New e-book: Establishing a proactive defense with Microsoft Security Exposure Management_MSSECURE:13D159DAC0E0A241E2FFD0969DF72C6F

Effective exposure management begins by illuminating and hardening risks across the entire attack surface. Some of the most meaningful shifts in se...

N/A N/A MSSECURE
NONE MSSECURE:CB4E68...

Unify now or pay later: New research exposes the operational cost of a fragmented SOC_MSSECURE:CB4E680AB67BC243280CDE9FE537EFCC

Security operations are entering a pivotal moment: the operating model that grew around network logs and phishing emails is now buckling under tool...

N/A N/A MSSECURE