Microsoft Security Blog Expert coverage of cybersecurity topics
- Phishing actors exploit complex routing and misconfigurations to spoof domains
by Microsoft Threat Intelligence on 6 January 2026 at 6:00 pmThreat actors are exploiting complex routing scenarios and misconfigured spoof protections to send spoofed phishing emails, crafted to appear as internally sent messages. The post Phishing actors exploit complex routing and misconfigurations to spoof domains appeared first on Microsoft Security Blog.
- Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services
by Aarti Borkar and Andrew Conway on 6 January 2026 at 5:00 pmAnnouncing Microsoft Defender Experts Suite, a integrated set of expert-led services that helps security teams keep pace with modern cyberattacks. The post Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services appeared first on Microsoft Security Blog.
- New Microsoft e-book: 3 reasons point solutions are holding you back
by Scott Woodgate on 18 December 2025 at 5:00 pmExplore the new Microsoft e-book on how a unified, AI-ready platform delivers speed, resilience, and measurable security gains. The post New Microsoft e-book: 3 reasons point solutions are holding you back appeared first on Microsoft Security Blog.
- Access Fabric: A modern approach to identity and network access
by Igor Sakhnov on 17 December 2025 at 5:00 pmAn Access Fabric is a unified access security solution that continuously decides who can access what, from where, and under what conditions—in real time. The post Access Fabric: A modern approach to identity and network access appeared first on Microsoft Security Blog.
- Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components
by Microsoft Defender Security Research Team on 15 December 2025 at 7:35 pmCVE-2025-55182 (also referred to as React2Shell and includes CVE-2025-66478, which was merged into it) is a critical pre-authentication remote code execution (RCE) vulnerability affecting React Server Components and related frameworks. The post Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components appeared first on Microsoft Security Blog.