Defend your data from cyberattacks using cloud data security solutions. Safeguard your infrastructure, apps, and data with Microsoft Security solutions.
Our summaryMaker of Windows and Microsoft 365, and a large security vendor in its own right, covering identity, endpoint, email, cloud and SIEM.
“Strengthen identity security with Microsoft Entra ID, a cloud identity and access (IAM) solution that prevents identity attacks and supports SSO and Zero Trust.”
Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.
Product page“Strengthen endpoint protection with Microsoft Defender for Endpoint. Stop cyberattacks, boost endpoint security with AI, and secure your devices.”
Endpoint detection and response for Windows, macOS, Linux and mobile devices.
Product page“Protect your organization's identity fabric with Microsoft Defender for Identity, an advanced cybersecurity platform for identity threat detection and response.”
Detects attacks against on-premises Active Directory and hybrid identities.
Product page“Microsoft Defender for Office 365 protects your email and collaboration tools from phishing, malware, and BEC attacks using AI-powered, enterprise-grade threat defense.”
Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.
Product page“Run a faster, leaner SOC with Microsoft Sentinel, a cloud-native SIEM that detects threats faster, automates response, and lowers SIEM costs with a data lake.”
Cloud SIEM and automated response, built on Azure.
Product page“Safeguard business-critical data with Microsoft Purview. Discover unified data security, information protection, data loss prevention, and insider risk management.”
Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.
Product page“Explore Microsoft Defender for Cloud, a security solution and CNAPP that protects cloud‑native application development across multicloud and hybrid environments.”
Cloud posture management and workload protection for Azure, AWS and Google Cloud.
Product page“Microsoft Intune is a cloud-based unified endpoint management solution built on Zero Trust. Empower IT to manage, secure and govern devices, apps and endpoints.”
Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.
Product page“Application Control restricts which applications users are allowed to run and the code that runs in the system core.”
Application control built into Windows, formerly Windows Defender Application Control, with AppLocker as the older option. Policies can be managed through Intune.
Product pageIndependent tests, peer reviews and articles about Microsoft. We link to them; we did not write or commission them, and nobody pays to appear here.
Stories in our coverage based on what researchers at Microsoft found or reported: 316 in total.
Attackers are using the AI pentesting tool ARTEX, with leaked secrets providing the fastest entry.
Post-training supply chain attacks can hijack AI coding agents via poisoned datasets or model checkpoints.
Microsoft confirms Windows updates since Oct 2026 cause SQL Server performance issues.
Hackers use GSocket backdoor to maintain Linux server access post-patching.
Hackers are using GSocket, a legitimate remote access tool, to maintain persistent access on Linux servers.
.NET 11 security updates include supply chain controls, authentication improvements, and crash reporting.
Microsoft AI finds 59 Linux kernel bugs, some over 20 years old, with 8 confirmed exploits.
Threat actors are using GSocket on Linux servers to maintain access after vulnerabilities are patched.
Microsoft FORGE Lab researchers found 59 Linux kernel bugs, 33 CVEs, and 8 privilege-escalation exploits.
Microsoft researchers discover Lazarus, a technique to embed hidden malware triggers in AI models.
Stories where a Microsoft product had a vulnerability or was attacked, or Microsoft itself was: 781 in total. Useful if you run its products.
Microsoft's November Patch Tuesday addresses 1,252 CVEs, highlighting the need for strategic patching over a blanket
Hackers exploit weak passwords to compromise Microsoft SQL Servers, deploying malware for crypto mining and remote
Hackers distribute XLoader malware via fake purchase order Word documents exploiting CVE-2017-11882.
Microsoft's global outage impacts Exchange Online, Outlook, Teams across multiple regions.
Swedish cybersecurity agencies issue weekly brief highlighting recent cyberattacks and phishing campaigns.
Microsoft confirms Windows activation failures after November updates.
New Windows zero-day 'SignDrop' allows local attackers to gain SYSTEM privileges by abusing CLFS.
Nightmare Eclipse drops Windows zero-day exploit 'SignDrop' abusing CLFS and Windows Defender.
Microsoft 365 experiences a massive global outage as fixes fail to restore server stability.
Microsoft cloud outage impacts Outlook, Teams, Copilot, and AI services.
Get an email when a new story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
