MicrosoftSecurity

New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Credit to Author: Hammad Rajjoub| Date: Tue, 07 Oct 2025 16:00:00 +0000

Microsoft Secure Future Initiative (SFI) patterns and practices are practical, actionable, insights from practitioners for practitioners based on Microsoft’s implementation of Zero Trust through the Microsoft Secure Future Initiatives. By adopting these patterns, organizations can accelerate their security maturity, reduce implementation friction, and build systems that are more secure by design, default, and in operation.  ​

The post New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

Inside Microsoft Threat Intelligence: Calm in the chaos

Credit to Author: Elliot Volkman| Date: Mon, 06 Oct 2025 21:00:00 +0000

Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response (IR) team, that chaos is exactly where the work begins.

The post Inside Microsoft Threat Intelligence: Calm in the chaos appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability

Credit to Author: Microsoft Threat Intelligence| Date: Mon, 06 Oct 2025 17:00:00 +0000

Storm-1175, a financially motivated actor known for deploying Medusa ransomware and exploiting public-facing applications for initial access, was observed exploiting the deserialization vulnerability in GoAnywhere MFT’s License Servlet, tracked as CVE-2025-10035. We are publishing this blog post to increase awareness of this threat and to share end-to-end protection coverage details across Microsoft Defender.

The post Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

Microsoft named a Leader in the IDC MarketScape for XDR

Credit to Author: Rob Lefferts| Date: Thu, 02 Oct 2025 17:00:00 +0000

Microsoft has been named a Leader in IDC’s inaugural category for Worldwide Extended Detection and Response (XDR) Software for 2025, recognized for its deep integration, intelligent automation, and unified security operations solutions.

The post Microsoft named a Leader in the IDC MarketScape for XDR appeared first on Microsoft Security Blog.

Read More