Intelligence Archive
Historical browsing for Microsoft security records by date, product, category, priority and source.
3 historical records
Product: Microsoft SentinelMicrosoft has introduced significant updates to unified security operations, including general availability of new content types for multitenant distribution, integration of Microsoft Sentinel into the Defender portal with a planned retirement from Azure portal by March 2027, enhanced threat intelligence alerts, and new UEBA experiences to aid investigations. Additionally, management features like RBAC viewing, content distribution profiles, and task-based incident workflows are improved to streamline operations.
Microsoft Sentinel - Microsoft primary source - 2 Sept 2026Microsoft Sentinel August 2026 Update: Enhanced UEBA, SAP Integrations, and Automation ConsistencyMicrosoft Sentinel's August 2026 update expands User and Entity Behavior Analytics (UEBA) with new data sources including Fortinet FortiGate and anomaly detections for multiple firewall and VPN events. SAP solutions receive performance and analytic rule enhancements. Notably, there is a critical change to analytics alert Account Name normalization to improve automation consistency, requiring updates to automation logic to handle UPN prefix/suffix separately.
Microsoft Defender - Microsoft primary source - 27 Aug 2026Microsoft Security Blog Highlights – August 2026 Updates and Threat InsightsThe August 2026 Microsoft Security Blog outlines new capabilities improving security management and agent activity insights across environments. Key threat intelligence includes active deceptive software download campaigns, the TerminalFix intrusion campaign, and the DeadLock ransomware analysis highlighting financial extortion and decentralized victim communications. Microsoft also advances Zero Trust strategies for AI and DevSecOps with new tools and guidance, emphasizing AI security and patch management challenges.