Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Microsoft Defender Zero-Day: Detecting SAM Database Access and NTLM Hash Theft
Microsoft Defender Zero-Day: Detecting SAM Database Access and NTLM Hash Theft Introduction A critical security vulnerability has been ident...
CVE-2024-38200 & CVE-2024-38201: Active Exploitation of Windows Defender — Detection and Hardening Guide
CVE-2024-38200 & CVE-2024-38201: Active Exploitation of Windows Defender — Detection and Hardening Guide Introduction In a disturbing shift ...
CVE-2026-21881 & CVE-2026-21882: Critical Excel RCE and Defender LPE — Detection and Remediation
Introduction This week's ThreatsDay Bulletin is a wake-up call for organizations relying on "security by obscurity" or assuming that age equ...
Microsoft Defender Zero-Days BlueHammer, RedSun, and UnDefend: Active Exploitation and Defense Guide
Introduction Defenders face a critical escalation in the threat landscape with the disclosure of three zero-day vulnerabilities in Microsoft...
Cookie-Controlled PHP Web Shells & Cron Persistence: Detection & Remediation
Introduction Microsoft Defender Security Research Team has uncovered a sophisticated shift in web shell tactics targeting Linux environments...
CrowdStrike SIEM Ingests Microsoft Defender: Guide to Unified Visibility
CrowdStrike SIEM Ingests Microsoft Defender: Guide to Unified Visibility Introduction The long-standing détente between CrowdStrike and Micr...