The agentic SOC—Rethinking SecOps for the next decade

Collection of recent Microsoft Security Blog posts (late Mar–Apr 2026) detailing multiple high-impact threats and trends: emerging financially motivated actors (Storm-2755) targeting Canadian payrolls and Storm-1175’s Medusa ransomware campaigns exploiting recently disclosed vulnerabilities; a severe Android intent‑redirection vulnerability in a widely used third‑party SDK that exposed millions of wallets; a March 31 Axios npm supply‑chain compromise attributed to North Korean actor Sapphire Sleet; SOHO router compromises (Forest Blizzard) enabling DNS hijacking and adversary‑in‑the‑middle; AI