Microsoft Threat Intelligence
@MsftSecIntel • 197,401 subscribers
We are Microsoft's global network of security experts. Follow for security research and threat intelligence.
Videos
The ransomware attack dubbed “JADEPUFFER”, one of the first documented cases of a threat actor using large language model (LLM) to conduct an end-to-end attack, offers a glimpse into how AI could shape future ransomware campaigns. While the attack relied on familiar techniques, it demonstrated how AI can rapidly iterate, adapt to failures, and continue progressing toward an objective. In this episode of the Microsoft Threat Intelligence Podcast, Elliot Volkman speaks with Michael Clark and Crystal Morin of Sysdig about the AI-driven activity, including its ability to generate and modify code, reason through errors, and work through technical obstacles that might slow a human operator. Despite its use of AI, JADEPUFFER relied on familiar weaknesses, including exposed services, unpatched vulnerabilities, and poor credential hygiene, highlighting the continued importance of exposure management and foundational security practices.
Microsoft Threat Intelligence17,132 次观看 • 2 个月前
In this episode of the Microsoft Threat Intelligence Podcast, Principal Threat Intelligence Analyst Crane Hassold explores how phishing and social engineering attacks are evolving beyond email in the threat landscape. While email remains the primary attack vector, Microsoft is tracking a broader social engineering landscape that includes QR code phishing, CAPTCHA-gated phishing, Teams-based impersonation, and credential theft campaigns designed to reach users across business communication channels. As organizations adopt new ways of communicating, threat actors continue to adapt alongside them, targeting users through the platforms they trust and use every day. Hear more about practical defensive measures and how to reduce exposure to evolving threats in this episode. As the Microsoft Threat Intelligence Podcast enters a new season, we want to thank Sherrod DeGrippo for 3.5 years of expert insight, thoughtful conversations, and leadership as host. Listen to her farewell episode:
Microsoft Threat Intelligence10,316 次观看 • 2 个月前
“Developers are terraforming the battlefield that defenders have to fight on.” In this episode of the Microsoft Threat Intelligence Podcast, the authors of the new book “Threat-Driven Software Development: Defending Online Services from Modern Threat Actors” discuss why modern software security must be guided by how attackers actually operate. Drawing on their experiences across threat intelligence, software engineering, identity security, and threat modeling, Michael Howard, Lee Holmes, Sherrod DeGrippo, and Shawn Hernan begin every chapter with a threat intelligence perspective, using real-world attacker techniques to frame the technical guidance that follows. Watch the latest podcast episode to learn what inspired the book and what the authors hope readers will learn. You can get “Threat-Driven Software Development: Defending Online Services from Modern Threat Actors” here:
Microsoft Threat Intelligence12,764 次观看 • 3 个月前
没有更多内容可加载