Supply chain attacks

Tailored AI insights from Microsoft Security Copilot

Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI.

Learn more
September 21, 2022 7 min read

Rewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices

A fake mobile banking rewards app delivered through a link in an SMS campaign has been making the rounds, targeting customers of Indian banking institutions.
December 18, 2020 17 min read

Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers

We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack.
April 22, 2020 5 min read

Defending the power grid against supply chain attacks: Part 3 – Risk management strategies for the utilities industry

By working with governments, trade organizations, and suppliers, the utility industry can improve security across the supply chain.
March 23, 2020 5 min read

Defending the power grid against supply chain attacks—Part 2: Securing hardware and software

The hardware and software companies who supply utilities must implement better security of their build and update environment to reduce the risk of an attack on critical infrastructure.
Go beyond data protection with Microsoft Purview

Govern, protect, and manage all of your data with Microsoft Purview, comprehensive solutions to help give you better visibility and control.

Learn more
March 23, 2020 6 min read

Latest Astaroth living-off-the-land attacks are even more invisible but not less observable

Astaroth is back sporting significant changes. The updated attack chain maintains Astaroth’s complex, multi-component nature and continues its pattern of detection evasion.
March 11, 2020 5 min read

Guarding against supply chain attacks—Part 3: How software becomes compromised

Set a high standard of software assurance with internal teams, partners, and suppliers to reduce your risk of a software supply chain attack.
February 18, 2020 3 min read

Defending the power grid against supply chain attacks—Part 1: The risk defined

The “Defending the power grid against supply chain attacks” blog series analyzes how supply chain attacks are conducted and the steps utilities, device manufacturers, and software providers can take to better secure critical infrastructure.
February 4, 2020 5 min read

Ghost in the shell: Investigating web shell attacks

Web shell attacks allow adversaries to run commands and steal data from an Internet-facing server or use the server as launch pad for further attacks against the affected organization.
Streamline privacy management with Microsoft Priva

Protect and govern personal information, reduce privacy risks, and manage subject rights requests at scale with Microsoft Priva privacy risk management solutions.

Learn more
February 3, 2020 4 min read

Guarding against supply chain attacks—Part 2: Hardware risks

Part 2 examines the hardware supply chain, its vulnerabilities, how you can protect yourself, and Microsoft’s role in reducing hardware-based attacks.
October 16, 2019 5 min read

Guarding against supply chain attacks—Part 1: The big picture

Paying attention to every link in your supply chain is vital to protect your assets from supply chain attacks.
July 26, 2018 11 min read

Attack inception: Compromised supply chain within a supply chain poses new risks

A new software supply chain attack unearthed by Windows Defender Advanced Threat Protection (Windows Defender ATP) emerged as an unusual multi-tier case.
March 22, 2017 3 min read

A new best practice to protect technology supply chain integrity

The success of digital transformation ultimately relies on trust in the security and integrity of information and communications technology (ICT).

Filtered by

Refine results

Rewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices

Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers

Defending the power grid against supply chain attacks: Part 3 – Risk management strategies for the utilities industry

Defending the power grid against supply chain attacks—Part 2: Securing hardware and software

Latest Astaroth living-off-the-land attacks are even more invisible but not less observable

Guarding against supply chain attacks—Part 3: How software becomes compromised

Defending the power grid against supply chain attacks—Part 1: The risk defined

Ghost in the shell: Investigating web shell attacks

Guarding against supply chain attacks—Part 2: Hardware risks

Guarding against supply chain attacks—Part 1: The big picture

Attack inception: Compromised supply chain within a supply chain poses new risks

A new best practice to protect technology supply chain integrity

Get started with Microsoft Security

Supply chain attacks

Filtered by

Refine results

Tailored AI insights from Microsoft Security Copilot

Go beyond data protection with Microsoft Purview

Streamline privacy management with Microsoft Priva

Get started with Microsoft Security