red team

Microsoft’s ecosystem just received one of the most consequential AI upgrades in recent memory: OpenAI’s GPT-5 is now embedded across Microsoft Copilot, Microsoft 365 Copilot, GitHub Copilot, and Azure AI Foundry—promising deeper reasoning, longer context, stronger coding assistance, and an...

A silent yet critical risk has emerged in enterprise Windows environments with the discovery of BadSuccessor, a powerful privilege escalation technique that takes advantage of Delegated Managed Service Accounts (dMSAs) in Active Directory under Windows Server 2025. While the dMSA migration...

The latest release of Kali Linux, version 2025.2, is more than just an incremental update; it’s a bold stride in both functionality and focus, recalibrating the system’s interface, platform support, and arsenal of pentesting tools to reinforce its status as a mainstay for professional red teams...

Artificial intelligence has rapidly woven itself into the fabric of our daily lives, offering everything from personalized recommendations and virtual assistants to increasingly advanced conversational agents. Yet, with this explosive growth comes a new breed of risk—AI systems manipulated for...

Microsoft’s AI red team isn’t your typical group of “hackers in hoodies”—it’s a highly specialized, interdisciplinary unit that’s been hard at work since 2018 to secure the future of generative AI. As Microsoft’s pioneer in AI red teaming has noted, their team has proactively “broken” over 100...

Red teams have a new trick up their sleeve. In an era when Microsoft fortifies credential theft defenses and Endpoint Detection and Response (EDR) systems evolve at breakneck speed, attackers are shifting away from classic payload-based methods. Enter RemoteMonologue—a highly innovative...

The Cybersecurity and Infrastructure Security Agency (CISA) has recently unveiled an advisory outlining the findings from a Red Team assessment conducted on a U.S. critical infrastructure sector organization. While most advisories induce yawns from non-security pros, this one is a wake-up...

Imagine you're living in a fortress. You believe it’s well-guarded with gates, drawbridges, and moats. But what if a tireless infiltrator sneaks in, unveils weak points, and maps vulnerabilities? That’s exactly what happened recently when the Cybersecurity and Infrastructure Security Agency...

For the last 20 years, the Microsoft Security Response Center has been an integral part of Microsoft’s commitment to customer security. We are often called on to talk about the work we do and how customers can apply the lessons we have learned over that period to better their security posture...