The agentic SOC—Rethinking SecOps for the next decade

This collection of Microsoft Security Blog posts (April 2026) highlights multiple high‑impact and evolving threats: a widely deployed npm supply‑chain compromise of Axios attributed to North Korean actor Sapphire Sleet that exposed potentially millions of users; a severe intent‑redirection vulnerability in a third‑party Android SDK that put millions of wallets at risk; SOHO router compromises by Forest Blizzard enabling DNS hijacking and adversary‑in‑the‑middle attacks; financially motivated groups Storm‑2755 conducting payroll diversion attacks against Canadian employees and Storm‑1175 using/