LevelBlue SpiderLabs has been tracking multiple waves of Wazza, a newly observed multi-stage phishing kit that deploys device code phishing targeting Microsoft 365 accounts. In addition to recent reporting by The Hacker News, our analysis examines the kit's evolving techniques and infrastructure, highlighting key changes observed across analyzed variants.

A new proof of concept called BigDiskBuster, published on GitHub on September 19, 2026, by the actor known as MSNightmare, shows that Defender doesn't need to be disabled to stop receiving updates, it just needs a much simpler dependency: disk space.

(Edit - Sept 17, 2026): The originally released PoC had issues that broke exploitation. That PoC has been revised by the author. We have reviewed the revised version of the exploit and have validated that it now functions as expected in our lab. We have added a section at the end of our original article discussing this update and our results.

Microsoft’s Project Perception brings coordinated AI agents into security operations, raising new questions about permissions, oversight, accuracy, and deployment risk.

The post Microsoft Project Perception Enters Public Preview: What Security Teams Should Know appeared first on TechRepublic.

You have Sentinel. You have Defender. Here is what fills the autonomous investigation gap between detection and autonomous resolution.

The post D3 Morpheus for Your Microsoft Security Environment appeared first on D3 Security.

The post D3 Morpheus for Your Microsoft Security Environment appeared first on Security Boulevard.