Microsoft Defender Archives | Microsoft Security Blog

A man in a suit and tie looking at a laptop.

July 17
5 min read

Transparency on Microsoft Defender for Office 365 email security effectiveness

Microsoft believes in transparently sharing performance data from Microsoft Defender for Office 365, and other ecosystem providers, to help customers evaluate email security solutions and make decisions to layer for defense in depth.

July 16
5 min read

Microsoft is named a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

We are honored to be recognized once again as a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platforms—our sixth consecutive time.

CISO (chief information security officer) collaborating with practitioners in a security operations center.

July 16
7 min read

Protecting customers from Octo Tempest attacks across multiple industries

To help protect and inform customers, Microsoft highlights protection coverage across the Microsoft Defender security ecosystem to protect against threat actors like Octo Tempest.

July 10
4 min read

Forrester names Microsoft a Leader in the 2025 Zero Trust Platforms Wave™ report

Employing a Zero Trust strategy is an effective way to modernize security infrastructure to protect against ever evolving security challenges.

A group of people sitting around a table in a conference room

July 7
4 min read

Learn how to build an AI-powered, unified SOC in new Microsoft e-book

Read Coordinated Defense: Building an AI-powered, unified SOC, the new e-book on how organizations can unify security operations to better meet the challenges of today’s cyberthreat landscape.

July 1
4 min read

Planning your move to Microsoft Defender portal for all Microsoft Sentinel customers

Microsoft is transitioning Microsoft Sentinel into the Microsoft Defender portal to create a unified security operations experience.

June 30
18 min read

Jasper Sleet: North Korean remote IT workers’ evolving tactics to infiltrate organizations

Since 2024, Microsoft Threat Intelligence has observed remote IT workers deployed by North Korea leveraging AI to improve the scale and sophistication of their operations, steal data, and generate revenue for the North Korean government.

A laptop on a table with two people in the background

June 24
5 min read

Microsoft is named a Leader in The Forrester Wave™: Security Analytics Platforms, 2025

Microsoft is proud to be named a Leader in The Forrester Wave™: Security Analytics Platforms, Q2 2025—which we believe reflects our deep investment in innovation and commitment to support SOC’s critical mission.

A group of people sitting around a table with computers.

June 3
4 min read

How Microsoft Defender for Endpoint is redefining endpoint security

Learn why many CISOs prefer Microsoft Defender for Endpoint for comprehensive cyberthreat protection across devices and platforms.

June 2
5 min read

Discover how automatic attack disruption protects critical assets while ensuring business continuity

To help security teams protect critical assets while ensuring business continuity, Microsoft Defender developed automatic attack disruption: a built-in self-defense capability.

A man and two women standing in front of a wall

May 29
12 min read

Defending against evolving identity attack techniques

Threat actors continue to develop and leverage various techniques that aim to compromise cloud identities.

Photo of IT support specialists looking at a laptop, with blue hexagon overlay

May 27
16 min read

New Russia-affiliated actor Void Blizzard targets critical sectors for espionage

Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since at least April 2024.

Microsoft Defender

Refine results