Frost Radar recognizes Microsoft leadership in cloud and application runtime security, helping teams prioritize and reduce exploitable risk.

Threat actors are using three publicly available proof-of-concept exploits to attack Microsoft Defender and turn the security platform's primary cleanup and protection functions against organizations ...

Update May 25, 04:19 EDT: CVE-2026-41091 is a Microsoft Defender local privilege escalation (LPE) flaw known as RedSun, and CVE-2026-45498 is known as UnDefend, a security flaw that can be exploited ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Updated December 13 with news of a zero-day exploit that ...

Microsoft patches two actively exploited zero‑day flaws in Defender, tracked as CVE‑2026‑41091 (privilege escalation) and CVE‑2026‑45498 (denial of service) Updates were shipped automatically via ...

Record Patch Volume: The June 2026 Patch Tuesday marked Microsoft's largest security update, fixing up to 208 vulnerabilities ...

Microsoft is testing a new Defender for Endpoint capability that will automatically isolate compromised endpoints to thwart attackers' attempts to move laterally across the network. This is now ...

Attack Surface Reduction (ASR) rules are a critical layer of defense in Microsoft Defender for Endpoint, designed to block common malware behaviors. However, IT administrators often face the ...

The new capability will be added to the automatic attack disruption tool, however, new research warns that the tool has to be tuned to avoid it becoming an attack vector. Microsoft is previewing a new ...

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in ...