Microsoft Security Blog Expert coverage of cybersecurity topics
- Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealerby Microsoft Threat Intelligence, Microsoft Digital Crimes Unit and Microsoft Security Experts on 21 May 2025 at 4:00 pm
Over the past year, Microsoft Threat Intelligence observed the persistent growth and operational sophistication of Lumma Stealer, an info-stealing malware used by multiple financially motivated threat actors to target various industries. Microsoft, partnering with others across industry and international law enforcement, facilitated the disruption of Lumma infrastructure. The post Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer appeared first on Microsoft Security Blog.
- Microsoft extends Zero Trust to secure the agentic workforceby Vasu Jakkal on 19 May 2025 at 4:00 pm
At Microsoft Build 2025, we’re taking important steps to secure the agentic workforce. We are excited to introduce Microsoft Entra Agent ID which extends industry-leading identity management and access capabilities to AI agents. The post Microsoft extends Zero Trust to secure the agentic workforce appeared first on Microsoft Security Blog.
- How the Microsoft Secure Future Initiative brings Zero Trust to lifeby Mike Adams on 15 May 2025 at 4:00 pm
Read how you can improve your security posture by applying Zero Trust framework and principles based on learnings from the April 2025 Secure Future Initiative progress report. The post How the Microsoft Secure Future Initiative brings Zero Trust to life appeared first on Microsoft Security Blog.
- Marbled Dust leverages zero-day in Output Messenger for regional espionageby Microsoft Threat Intelligence on 12 May 2025 at 4:00 pm
Since April 2024, the threat actor that Microsoft Threat Intelligence tracks as Marbled Dust has been observed exploiting user accounts that have not applied fixes to a zero-day vulnerability (CVE-2025-27920) in the messaging app Output Messenger, a multiplatform chat software. These exploits have resulted in collection of related user data from targets in Iraq. Microsoft The post Marbled Dust leverages zero-day in Output Messenger for regional espionage appeared first on Microsoft Security Blog.
- Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2by Microsoft Office of the CISO on 7 May 2025 at 4:00 pm
Meet the minds behind how Microsoft prioritizes cybersecurity across every team and employee. Three deputy chief information security officers share their experiences in cybersecurity and how they are redefining protection. The post Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2 appeared first on Microsoft Security Blog.