A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

Windows patching is the tip of the iceberg — the real exposure sits in the hundreds of third-party apps beneath the surface.

Patching is about staying ahead of threats, not just checking a compliance box — yet third-party applications routinely slip through the cracks, opening the door to breaches, compliance failures, and ...

Microsoft Research conducts fundamental science and technology research across a spectrum of research areas. With labs around the globe we pursue breakthroughs across the computing and AI stack to ...