Latest Microsoft Defender email security benchmarking insights
Every benchmark tells a story. The most valuable ones tell us where to improve next. For five consecutive quarters Microsoft
Information Security
Teaching a Machine to Think Like an Incident Researcher
Every security incident starts as a story: a suspicious login, a user accessing sensitive data, or a weak signal buried
From guidance to action: Security fundamentals that materially reduce riskÂ
AI has already made fundamental changes to the operating environment for cybersecurity. Cyberattackers are testing more paths, adapting their techniques,
How a Rogue External MFA Provider Steals Passwords
Varonis Threat Labs identified a credential-phishing technique we call TrustSink. It turns a trusted external authentication provider into a persistent
Introducing Varonis Data Lifecycle Management
Varonis Data Lifecycle Management (DLM) is a new capability that automatically finds and quarantines redundant, obsolete, and trivial (ROT) data
Passkey-themed social engineering leads to identity and cloud compromise
In this article Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed
Detect and disrupt AI-themed attacks with Microsoft Defender
Every wave of technology excitement creates a new opportunity for cyberattackers, and AI is no exception. Microsoft Threat Intelligence has
Protecting organizations from AI-assisted executive impersonation and invoice fraud
In this article Threat actors are increasingly improving their tactics to make suspicious emails look like legitimate email notifications to
Imperva Customers Protected Against StyleSmuggler (CVE-2026-75650) in Adobe Commerce and Magento Open Source
TL;DR: CVE-2026-75650, dubbed StyleSmuggler, is a critical vulnerability affecting Adobe Commerce and Magento Open Source. The vulnerability allows an unauthenticated attacker to inject
Threat matrix: Mapping threats across cloud web applications
In this article Microsoft introduces the cloud web applications threat matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize,