Latest Intelligence
Microsoft's 2026 Threat Report Is Really About 2020
Microsoft's 2026 Digital Defense Report leads with autonomous AI ransomware. Read it in full and it argues the opposite. The most detected bug in the data is Zerologon, patched in 2020. Attackers log in with stolen credentials. AI did not change how you get breached, only how fast.
NovaCookies Phishing Kit Steals Microsoft 365 Sessions to Bypass MFA
For US$320 a month, NovaCookies rents anyone the ability to walk past your MFA. It does not steal your password. It steals your session, the proof you already logged in, after you authenticate perfectly. MFA did not fail. It just stopped being the finish line.
Microsoft Patched 400 Bugs This Month and That Is Not the Scary Part
Microsoft patched over 400 flaws in a single month, triple the normal load, because AI now hunts bugs faster than any human team. But real-world exploitation has not surged to match. The scary number is not 400. It is 13 of 14, and the gap is closing fast.