IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

Microsoft Research conducts fundamental science and technology research across a spectrum of research areas. With labs around the globe we pursue breakthroughs across the computing and AI stack to ...

Windows patching is the tip of the iceberg — the real exposure sits in the hundreds of third-party apps beneath the surface.

Patching is about staying ahead of threats, not just checking a compliance box — yet third-party applications routinely slip through the cracks, opening the door to breaches, compliance failures, and ...