This is the Trace Id: ca4997a1f66413ba0f3f05e98adf646b

Threat actor trends and updates

A hill with cogs and other parts of a machine in the background

Nation-state threat actors

Nation-state threat actors launch cyber operations that are often focused on collecting data on their targets
Blizzard threat actors Sandstorm threat actors Typhoon threat actors
Chart showing three types of fileless threats

Financially motivated threat actors

Cybercriminals continue to enhance their tools and techniques to maximize the impact of their campaigns, including ransomware and identity theft 
Octo Tempest Storm-0501 Other financially motivated actors
Windows Defender ATP shown with several icons representing its security capabilities

Nation-state influence operations

Nation-states launch influence operations to sway public perception and sentiment, sow discord, and undermine trust in public institutions
Russian influence operations Iranian influence operations Chinese influence operations
Industrial operator with computing devices that can be affected by malware

Threat actor spotlight: Sleet actors

Learn about the latest activity associated with North Korean threat actors
Sleet threat actors
Security Operations Center personnel responding to security incidents

Microsoft threat actor naming taxonomy

Learn about how Microsoft names threat actors 
Complete list of threat actor categories
Aerial shot of Chicago showing buildings that represent businesses that should be protected

Threat actors using AI

Learn about emerging threats in the age of AI, focusing on identified activity associated with known threat actors
How threat actors are using AI in their campaigns

Follow us