Protecting Your Organization with the Phishing Detection Security Agent for Power Pages

Overview Power Pages continues to enhance its default security framework and empowers users to confidently use the platform. As organizations increasingly rely on Power Pages for their external-facing portals, it’s essential to stay ahead of malicious actors who may attempt to exploit these sites for phishing. The Phishing[…]

Read More

Inside Microsoft Threat Intelligence: Calm in the chaos

Leading Through the Worst Day Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response (IR) team, that chaos is exactly where the work begins. In Episode 1, we showed how Microsoft Threat Intelligence and the[…]

Read More

Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability

On September 18, 2025, Fortra published a security advisory regarding a critical deserialization vulnerability in GoAnywhere MFT’s License Servlet, which is tracked as CVE-2025-10035 and has a CVSS score of 10.0. The vulnerability could allow a threat actor with a validly forged license response signature to deserialize an[…]

Read More