Azure
10 articles
AI-powered BEC scams use deepfake execs and fake invoices to steal ACH payments
Microsoft details a new AI-assisted business email compromise campaign that impersonates executives and forges invoices to trick finance teams into sending fraudulent ACH payments.
How Storm-3068 turned a leaked credential into full Azure tenant takeover
Attackers used a compromised developer identity to pivot from source code repos to cloud admin rights, exposing gaps in identity hygiene and pipeline security.
Azure Developer CLI Extension Framework GA Enables Custom Dev Workflows
The Azure Developer CLI (azd) extension framework is now generally available, allowing teams to build and share custom workflows for project initialization, deployment, and validation.
Microsoft DCU disrupts EvilTokens PhaaS platform behind device code phishing surge
Microsoft’s Digital Crimes Unit disrupted EvilTokens infrastructure, a top PhaaS platform using AI-assisted lures and automated token theft for device code phishing attacks.
Azure MCP Server 2.0 GA Delivers Self-Hosted Agentic Automation
Azure MCP Server 2.0 reaches general availability with self-hosting support, security hardening, and performance gains for agentic workflows.
Microsoft releases Cloud Web Applications Threat Matrix aligned with MITRE ATT&CK
Microsoft introduces a MITRE ATT&CK-aligned threat matrix to map and mitigate risks in cloud-hosted web apps and serverless platforms.
Microsoft Defender adds AI-themed attack detection for phishing and malware
Microsoft Defender now identifies and disrupts AI-generated phishing, malware, and multi-stage attacks across the kill chain using behavioral and content analysis.
ASCII smuggling shifts from AI prompt injection to phishing evasion
Attackers now use invisible Unicode characters to bypass email filters, repurposing a technique once used to hide prompts from AI models.
Securing Edge AI in Customer-Owned Environments with Azure Attestation
Learn how to verify trust in edge AI systems before releasing sensitive data using Azure Attestation and confidential computing.