Women’s History Month: Encouraging women in cybersecurity at every career stage

Microsoft Security Blog updates (Feb–Mar 2026) describe multiple high-impact adversary techniques and defensive guidance: malicious AI browser extensions (≈900k installs, affecting >20k enterprise tenants) exfiltrating LLM chat histories and browsing data; Tycoon2FA—an AiTM phishing-as-a-service—operating at scale against hundreds of thousands of organizations; signed malware using a stolen EV certificate to deploy legitimate RMM tools as persistent backdoors; OAuth redirection abuse used to weaponize trusted sign‑in flows for phishing/malware delivery; developer-targeting via malicious Next.j