Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

Microsoft Patch Tuesday September 2026 set a record with 966 vulnerabilities patched, but security analysts say an ...

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based ...

Threat actors are increasingly exploiting overlooked Active Directory service principal name misconfigurations, making ordinary domain accounts vulnerable to Kerberoasting.

NCC Group's July threat report highlights Jadepuffer, an AI-driven ransomware operation that can carry out much of an attack without a human directing every step. Jadepuffer can change tactics when an ...

The following is the transcript of the interview with Sunoco chairman Ray Washburne, Republican midterm election chair, that ...

Auth0, CrowdStrike Falcon and Salesforce Service Cloud connectors can now consolidate security data from multiple accounts or tenants into a single Sentinel workspace.

A toolkit shaped by decades of Unix history makes technical work second nature on Linux.