Research reports

Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

The Shai‑Hulud 2.0 supply chain attack represents one of the most significant cloud-native ecosystem compromises observed recently. Attackers maliciously modified hundreds of publicly available packages, targeting developer environments, continuous…

Supply chain

Windows Startup Settings

After October 14, 2025, Microsoft will no longer provide free software updates from Windows Update, technical assistance, or security fixes for Windows 10. Your PC will still work, but we recommend moving to Windows 11. Learn more You might need to change…

Microsoft Security Response Center Blog

Strengthening secure software at global scale: How MSRC is evolving with AI Tuesday, April 7, 2026 Cybersecurity has always been a race between defenders and attackers, constrained by human time, attention, and scale. What is changing now is the level of…

404 ~ Not found

1. MSRC 2. Customer Guidance 3. Security Update Guide 4. Not found The page you were looking for was either not found or not available! Source: https://portal.msrc.microsoft.com/security-guidance/advisory/ADV170021

404 ~ Not found

1. MSRC 2. Customer Guidance 3. Security Update Guide 4. Not found The page you were looking for was either not found or not available! Source: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625 (Feed generated wi

Using Software Restriction Policies and AppLocker Policies

Applies To: Windows 7, Windows 8.1, Windows Server 2008 R2, Windows Server 2012 R2, Windows Server 2012, Windows 8 This topic for the IT professional describes how to use Software Restriction Policies (SRP) and AppLocker policies in the same Windows…

[MS-GPPREF]: Password Encryption

No excerpt available.

Set up Recovery Actions to Take Place When a Service Fails

Applies To: Windows 7, Windows 8, Windows Server 2008 R2, Windows Server 2012 If a service fails, you can use the Services snap-in to specify what action to take (for example, running a program or script) on the first or second service failure, or on…

xp_cmdshell (Transact-SQL) - SQL Server

Spawns a Windows command shell and passes in a string for execution. Any output is returned as rows of text. Transact-SQL syntax conventions xp_cmdshell { 'command_string' } [ , NO_OUTPUT ] Important Arguments for extended stored procedures must be entered in…

5bc57431-a7a9-49ad-944d-b93b7d35d0fc.pdf

Iran steps into US election 2024 with cyber-enabled influence operations A MICROSOFT THREAT INTELLIGENCE REPORT Date: August 9, 2024 Foreign malign influence concerning the 2024 US election started off slowly but has steadily picked up pace over the last six…

Microsoft Security Compliance and Identity

No excerpt available.