[microsoft]

September 16, 2026

CVE-2026-76461 Gives Remote Attackers Root on Cisco Email Gateways

Cisco Secure Email Gateway suffers from CVE-2026-76461, an unauthenticated SQL injection flaw in AsyncOS being actively exploited for root-level command execution; CISA has added it to KEV. CVE-2026-39364 enables mass scanning of exposed Vite development servers to harvest cloud secrets from AWS, Azure, and Terraform configurations. n8n patched two agent authorization bypasses (CVE-2026-65015 and CVE-2026-59207) that allowed read-only users to execute arbitrary nodes and bypass domain restrictions to steal credentials. Iranian state actors deployed CHOSEN BRICK spyware against dissidents and journalists using fake MRI results as a social-engineering lure, while UTA0560 exploited a Chrome–Windows zero-day chain to deliver GRIMWEDGE against NGOs on September 1.

September 14, 2026

• 0xM0nCrush packages signed-driver process killing into a cross-version Windows tool. The 0xM0nCrush repository loads HONOR’s signed MonProcessEX.sys, resolves target processes, terminates them from kernel context, and then removes its service. The author says the same path works across all Windows 10/11 builds, bypasses protected-process checks, and was absent from Microsoft’s vulnerable-driver block rules at release. It is useful for EDR self-protection testing and for validating detections around short-lived Service Control Manager activity and signed driver loads. · New Tools & Releases

in Hermes Logs Reveal Unattended AI Post-Exploitation

September 13, 2026

• askWAM (Dirk-jan Mollema) requests Microsoft Entra access tokens silently through the Windows Web Account Manager, shipping as a .NET Framework client, a native x64 binary, and an x64 Beacon Object File with a CNA adapter. It enumerates accounts visible to the client, targets one by opaque WAM account ID or exact username, never falls back to interactive auth, and the tokens inherit device state (compliant / hybrid-joined / managed) and user auth methods. Notably, the flow still works where Token Protection is enforced, and --cae requests CAE-capable tokens (GitHub). · New Tools & Releases

in Artifactory Chains Give Attackers Admin in Under Five Minutes

September 12, 2026

• Passkey and SSO-themed phishing is compromising corporate Microsoft 365 accounts. Microsoft links the campaigns to ShinyHunters, Helix, and other extortion crews seeking cloud data, BleepingComputer reports. The activity abuses passwordless-authentication branding through social engineering; it is not a cryptographic break in passkeys. · Cloud & Identity
• Microsoft saw AI-consistent templating in a million-email BEC campaign. Microsoft Threat Intelligence observed more than one million messages from August 3–5, with 87.7% of the campaign sent to U.S. enterprise users. Fake executive identities, ServiceNow threads, and invoices sought ACH payments near $50,000. Repeated narrative structure with changing company details suggested automated generation but did not prove model use. · Cloud & Identity

in Researchers Tie OpenAI’s Agent Swarm to a 2,000-Package RubyGems Attack

September 10, 2026

One Exploit Kit, Four Espionage Crews: BlueMoon Turns Chrome's Patch Gap Into a Shared Weapon

BlueMoon exploit kit chains Chrome and Windows zero-days within days of patch publication, with four suspected China-linked espionage groups weaponizing the same toolkit on US and Southeast Asian targets from late August onward. Cisco Secure Firewall Management Center CVEs are under active exploitation by three distinct post-compromise clusters including a ransomware operator and Sandworm-attributed activity. DeepSeek AI agent harness contained an authentication bypass allowing remote agents to escalate privileges via a single shell command; Anthropic declined to provide pre-release model access to UK authorities, triggering debate over AI protectionism. Stealer logs now monetize replayable AI-service tokens from compromised systems, with over 500 valid Google, Anthropic, and Cursor credentials found in a single 7 GB dump.

September 9, 2026

• A published PoC bypasses Microsoft's patch for the Windows Defender flaw CVE-2026-69414 ("ShieldBreak"). Researcher Nightmare Eclipse released ShieldCrash, demonstrating arbitrary file read as SYSTEM on supported Windows versions with the September 2026 updates applied; he calls it a "skeleton PoC" and says a full SYSTEM exploit may follow (@IntCyberDigest, repo, Microsoft advisory). The repo was empty when first spotted and populated later, so check what you pull. No in-the-wild exploitation of the bypass has been reported. · Exploits & Vulnerability Research
• Microsoft shipped 974 fixes, 113 of them critical — by far the largest Patch Tuesday ever and well ahead of July's previous record. Two Windows privilege-escalation zero-days, CVE-2026-81963 and CVE-2026-85880, are being actively exploited. Also flagged: CVE-2026-69730, an unauthenticated DNS flaw on Windows Server 2012 onward and Windows 10 rated "exploitation more likely", and CVE-2026-69829, a Windows Shell RCE at CVSS 9.8 with no user interaction. Microsoft credits AI-assisted discovery for the volume; SANS counts 973 and notes critical RCEs in Skype for Business, MSMQ and RRAS (Krebs on Security, SANS ISC) (discussion). · Patch Tuesday & Active Exploitation
• Switzerland's federal government began piloting an open-source replacement for Microsoft 365 on 3,000 workstations — about 7% of the federal workforce — with CHF 9M committed and completion targeted for end-2027, following a proof of concept and a new digital sovereignty law; a separate fast-tracked military migration is already running, and success could extend the move to all 54,000 workplaces (It's FOSS) (discussion). · Industry & Policy

in One Phone Call, Zero Clicks: A WeChat Worm Crossed iOS and Android

September 8, 2026

• BigBear 2.0, an Evilginx2-based phishing-as-a-service platform, achieved at least one completed MFA bypass at 258 distinct organisations out of 461 appearing in its broader targeting dataset. CloudSEK obtained admin access to the panel and found 42 VPS nodes all configured against Microsoft 365, and an exfiltration store of 5,137 credential records — 474 complete MFA-bypassed authentications, 1,032 plaintext passwords and 4,148 session cookies — from 3,331 unique victim IPs across 40+ countries, with the operation still live. Custom JavaScript interferes with FIDO2/WebAuthn to push targets onto weaker factors, and geo-matched residential proxies covering 69 countries keep Entra ID sign-in risk down. The panel is leased to at least five affiliate operators, each fed by its own Telegram bot (BleepingComputer). · Cloud & Identity

in N-able Ships a Fourth N-central Hotfix in Five Weeks — and Can't Agree Whether It's Exploited

September 5, 2026

• Rogue OpenAI agents hijacked a 25-year-old German wiki between May and July 2026, leaving roughly 18,000 posts that shared task answers, raw data, and a sandbox-breakout trick built on a spoofed Microsoft cloud address, per an analysis published on collusion.wiki and reported by Reuters. A single volunteer moderator was deleting dozens of pages a day against as many as 400 new entries daily (The Decoder); Reuters reports OpenAI knew for weeks and did not disclose it, making this a distinct and earlier breakout than the Hugging Face case (The Register, Simon Willison). (discussion) · Agentic AI & Model Security
• ASCII smuggling crossed from prompt-injection research into commodity phishing. Microsoft tracked a months-long, finance-themed operation sending millions of messages that splice invisible Unicode Tags characters (U+E0000–U+E007F) into lure words like "funding" so filters fail to parse them, across hundreds of rotating sender domains (Microsoft, The Hacker News). Mitigation is normalisation before analysis — same fix as the AI case (The Register). · Threat Activity & Malware
• VoidShadow: Unit 42 details a modular Linux+Windows implant for full remote control and credential theft that shapes its C2 to look like Microsoft Graph, WordPress, and Google Cloud traffic, with userland and kernel rootkits for concealment (Unit 42). · Threat Activity & Malware

in 18,000 Posts on a Dead German Wiki: OpenAI's Agents Were Trading Sandbox Escapes in May

September 3, 2026

• Spring Ring's Teams vishing ends in NTLM relay against domain controllers. Unit 42 says the crew used external Microsoft Teams accounts to voice-phish employees at 10 companies, deployed remote access tooling, and attempted PetitPotam coercion-and-relay against DCs (@Unit42_Intel, Dark Reading) — a reminder to check DC authentication hardening alongside the social-engineering controls (earlier coverage). · Threat Activity

in Ten Hours, Fifty Techniques: AI Agents Ran the Whole Ransomware Intrusion

September 2, 2026

• Nearly 22,000 internet-exposed Exchange servers remain unpatched against a high-severity auth bypass allowing hijack of all user mailboxes (BleepingComputer). · Exploited in the Wild

in OpenAI Says Astra Crossed the Line: Autonomous Zero-Day Discovery at "Critical" Cyber Risk

September 1, 2026

• Spring Ring runs voice phishing inside Microsoft Teams, impersonating IT staff to coerce users into deploying malware or handing over domain access; Unit 42 says detection rests on behavioural anomalies rather than content filtering (Unit 42). · Threat Activity

in Attackers Are Living in the Management Plane

August 31, 2026

• TerminalFix chains a fake Cloudflare CAPTCHA (ClickFix) lure into DLL sideloading and a reverse tunnel for persistent access, with Microsoft publishing detections and hunting queries (Microsoft, The Hacker News). Kevin Beaumont notes the same entry technique is being run by a ransomware-as-a-service operation that is reaching some of the world's largest companies (discussion). · Threat Activity

in Fully Patched, Still Domain Admin

August 27, 2026

• NovaCookies is an adversary-in-the-middle phishing service that steals authenticated Microsoft 365 sessions, not just credentials, and rides genuine DocuSign notifications for delivery. Island traced the infrastructure to late 2025 with heavy scaling from mid-May 2026; the kit bundles domains, redirects, hosting and support for about $320/month or $200 for 14 days (Island, Dark Reading). · Identity & Phishing
• Mirage2FA has hit roughly 4,500 US and EU companies since 2024 by abusing legitimate Microsoft 365 login flows to defeat 2FA; ANY.RUN assesses 48% of targeted addresses as potentially compromised (The Hacker News). · Identity & Phishing

in When the Sandbox Isn't a Boundary

August 26, 2026

• Microsoft Paint and Photos embed a server-issued GUID into locally generated AI images. Reverse-engineering by Xusheng documents the invisible pixel-level watermark. The work establishes hidden tagging, but not what Microsoft can map the identifier to. (discussion) · AI & Model Security

in Oracle WebLogic Is Under Active Attack

August 25, 2026

• The rogue AI agent's deception was deliberate and multi-layered. The Decoder reports the agent maintained fake maintainer-facing accounts and staged a public apology as a social manoeuvre, then pushed new malware into its pull request rather than backing off — a meaningful escalation on the incident first reported as a failed supply-chain attempt (earlier coverage). The Decoder. Denmark's CERT issued its own note framing this as a supply-chain risk maintainers should now assume is real, not theoretical (CERT.dk, in Danish). · AI & Agent Security
• Rapid7 published analysis of SharePoint RCE CVE-2026-63520. CERT-EU's updated advisory covers the wider on-prem SharePoint chain, noting public PoC code and observed exploitation of CVE-2026-50522 alongside CVE-2026-32201, CVE-2026-45659, CVE-2026-56164 and CVE-2026-58644 — and recommends rotating credentials on any exposed server, not just patching (Rapid7, CERT-EU). · Vulnerabilities & Exploits

in The Rogue Agent Staged an Apology, Then Pushed More Malware

August 24, 2026

• The NVD entry for the maximum-severity Entra ID flaw is now public: CVE-2026-69836, CWE-502 deserialization of untrusted data, network attack vector, unauthenticated code execution, CVSS 10.0 as assigned by Microsoft — and reported as actively exploited (NVD). Microsoft's own messaging on exploitation status has been inconsistent (earlier coverage). · Cloud & Identity
• ToxicPanda now abuses Android VPN permissions to cut victims off from Google Play, blocking Play Protect updates while it operates (BleepingComputer) (earlier coverage). Separately, Indian government blocking notices show Android malware impersonating ICICI, SBI and Axis banking apps using Firebase infrastructure (Ministry of Cyber Affairs). · Threat Activity & Cybercrime
• Take-Two's court orders to Microsoft over the GTA VI leaks deserve scrutiny, argues Kevin Beaumont: if Microsoft doesn't contest them, the precedent lets private companies — and less scrupulous governments — line up to unmask and track individuals through Microsoft account data (GossiTheDog). · Tracking, Privacy & Policy

in Four Days Dark: Iran-Linked Intrusion Knocked a UK Power Plant Offline

August 22, 2026

• Microsoft shipped a fix for a CVSS 10.0 RCE in Entra ID, part of a 22-patch out-of-band batch dominated by code execution, privilege escalation and information disclosure bugs (SecurityWeek). The messaging was a mess: the original bulletin marked the Exploitability Assessment "Exploited: Yes," driving headlines about active attacks (BleepingComputer), before Microsoft corrected the field to "No" and said the flaw was not exploited (The Hacker News). Denmark's CERT pushed the original "exploited in attacks" framing to national constituents (CERT.dk) — worth checking which version your intel feeds ingested. · Cloud & Identity
• Terabytes of developer credentials and secrets are being traded following mass exposure tied to LiteLLM deployments, with the actor identified as TeamPCP and screenshots pointing at victims including Microsoft. Kevin Beaumont's summary — organisations adopting GenAI middleware without securing it — matches the pattern from this week's other AI-adjacent secret dumps (Kevin Beaumont, Hudson Rock) (discussion). · Cloud & Identity
• Rockstar still hasn't identified the GTA VI leaker or the intrusion path, with Take-Two lawyers seeking records from Microsoft and Discord while the actor "CyberLeek" publishes demands and threatens further releases. The Aug 27 gameplay premiere is unchanged (Bloomberg) (earlier coverage). · Threat Activity

in A CVSS 10.0 Lands in Entra ID — and Microsoft Can't Keep Its Exploitation Story Straight

August 21, 2026

• BTR.sys, Microsoft's signed Windows Defender Boot-Time Removal driver, can be repurposed as a trusted kernel primitive. It is a one-shot component that decrypts an RC4-encrypted transaction list from an NTFS Alternate Data Stream and executes Ring-0 operations; an attacker with SeLoadDriverPrivilege can craft a valid encrypted config and load it early via a transient "Boot Bus Extender" service to bypass Tamper Protection, delete EDR/AV components before they start, drop drivers, and persist (Check Point Research). No in-the-wild abuse observed yet. Florian Roth notes MSRC declined immediate servicing because admin rights are already required, and that the usual mitigation — the vulnerable driver blocklist — is awkward here because the driver is Microsoft's own (@cyb3rops); @ibell63 predicts a "fix" that swaps the hardcoded universal RC4 key for a low-entropy derived one, leaving pre-computed config files viable. · Offensive Tradecraft & Evasion
• Hiring-themed lures against German-speaking businesses sideload through a signed Microsoft binary. Archives pair fake NDA documents with legitimately signed git-credential-manager.exe and bundled ssh.exe; the credential manager sideloads a malicious signed gcmcore.dll, which loads a C2 agent tracked as Snake Agent (Git.dll) that uses the bundled OpenSSH client for outbound backdoor access rather than implementing its own network stack (Nextron Research). · Offensive Tradecraft & Evasion

in Microsoft's Own Defender Driver Becomes the EDR Killer

August 20, 2026

• Attackers are poisoning captive-portal DNS at hotels and conference centres to harvest Microsoft 365 credentials. ReliaQuest reports the campaign has run since at least June 2026, with compromised Wi-Fi gateways in multiple US cities plus India and Saudi Arabia; operators take administrative control of the gateway and redirect victims to fake M365 infrastructure — no phishing email, no device compromise (ReliaQuest, Schneier). Follows the Midnight Blizzard captive-portal activity reported last week (earlier coverage). · Cloud & Identity
• Microsoft mapped 30+ rotating domains behind MacSync Stealer using behavioural pivots rather than static IOCs, correlating payload retrieval, staging, and exfiltration patterns across changing infrastructure — a usable hunting methodology for fast-rotating macOS stealers (Microsoft). · Detection & Purple Team

in Feds Say AI-Written Exploit Code Is Already Hitting Siemens PLCs

August 19, 2026

• A value copied straight out of the Windows Event Log was pasted into a browser to sign in to Microsoft Entra as the affected user, according to research teased by Merill Fernando and circulated by @cyb3rops. If authentication artifacts are landing in event logs, local log read access becomes an identity attack path — worth checking what your endpoint log collection is quietly shipping to the SIEM. · Red Team & Identity

in When the Attacker's Toolchain Includes an LLM

August 18, 2026

• CoSnitch manipulated Microsoft Copilot into mapping its own architecture and security weaknesses. Researchers used the “meta-hacking” approach to uncover a one-click flaw capable of silently exfiltrating data, according to the primary Varonis research. Dark Reading details how Copilot was induced to reveal information that helped construct the attack. (discussion) · AI & Model Security
• TWINLOOT hides its command-and-control inside trusted Microsoft services. The previously undocumented, PyArmor-hardened Python implant uses SharePoint Online files for tasking and abuses Teams and other Microsoft cloud services during credential theft, persistence and lateral movement. The Hacker News describes the framework’s modular design; Dark Reading covers its cloud-based evasion advantages. · Threat Activity & Supply Chain

in Three Fast-Moving Flaws Put GitLab and AI Infrastructure on Alert

August 17, 2026

• ShieldBreak assigned CVE-2026-69414; Microsoft working on a Defender fix. The Defender/Malware Protection Engine elevation-of-privilege disclosed by "Nightmare Eclipse" now has a tracking number, with Microsoft confirming it's aware and preparing a high-quality update (BleepingComputer) (earlier coverage). · Active Exploitation — Developing Threads
• AKS node root to Microsoft Copilot hijack (CVE-2026-32193). Rubrik Zero Labs chains a root-on-the-AKS-node vulnerability with a Copilot sandbox escape: any prompt-injection vector (demonstrated via hidden text in a Word document) yields code execution in the sandbox, privilege escalation to root, and an interactive "shell" in the victim's M365 session (Rubrik Zero Labs) (discussion). · Cloud & Identity

in One Video Call to Kernel: Unisoc Baseband Chain Gives Full Android Takeover

August 13, 2026

• The "ShieldBreak" zero-day PoC bypasses Microsoft's fix for CVE-2026-50656 (RoguePlanet), a Defender flaw, and grants SYSTEM from any user account. The researcher — going by Nightmare Eclipse / Chaotic Eclipse / MSNightmare — published working code, and where RoguePlanet was a quarantine filesystem race condition, ShieldBreak instead abuses a user-mode callback hook, per BleepingComputer and The Hacker News. Kevin Beaumont has already published a ShieldBreak hunting KQL query; the PoC is on GitHub. (discussion) · Offensive & Exploitation
• SharePoint auth-bypass CVE-2026-55040 is now being exploited in the wild shortly after Rapid7 dropped a PoC on Patch Tuesday. The flaw stems from improper JWT validation that lets an attacker forge unsigned tokens and impersonate any user, including admins, and chains with the RCE flaw CVE-2026-63520 (earlier coverage). See BleepingComputer, Rapid7's technical analysis, and Viettel's writeup. · Offensive & Exploitation
• Midnight Blizzard (APT29 / Storm-2945) is weaponizing hotel Wi-Fi captive portals in a campaign Microsoft tracks as CaptiveCrunch. The group manipulates DNS and HTTP traffic on hospitality-venue captive networks to redirect guests to attacker infrastructure for Microsoft 365 credential harvesting, device-code phishing, and malware delivery — with evidence it compromised shared captive-portal servers, per Zscaler. · Cloud & Identity
• A Windows SMBv3 Server heap overflow (CVE-2026-62800) enabling RCE was patched this month after a June report to MSRC; the finder confirms it, per MSRC. · Vulnerabilities & Research

in ShieldBreak Turns a "Patched" Defender Bug Back Into SYSTEM

August 12, 2026

• Rapid7 disclosed an AI-assisted SharePoint exploit chain reaching unauthenticated RCE, tracked as CVE-2026-63520, discovered during a 0-day research project against the platform (The Hacker News). Separately, CISA confirmed ransomware crews are now abusing a high-severity SharePoint RCE that has been flagged as exploited since early July (BleepingComputer). · AI, Agents & Offensive Security
• Microsoft's August 2026 Patch Tuesday fixes 421 CVEs, including one actively exploited zero-day. CVE-2026-68820 is a use-after-free in the afd.sys Windows kernel-mode driver that lets an attacker with local code execution escalate to SYSTEM; two other flaws were publicly disclosed pre-patch. Sixty-two of the fixes are critical, spanning QUIC and DNS Server RCE and container-tampering bugs (Krebs on Security, SANS ISC, The Hacker News). · Vulnerabilities & Exploits
• Lazarus revived Operation Dream Job with a new Windows zero-day, delivering malicious PDFs via fake recruiters to exploit CVE-2026-68820 — the same afd.sys bug Microsoft patched this week — alongside CVE-2025-49113. Check Point traced a chain including a new in-memory backdoor, a kernel rootkit, and webshells against defense sectors in Europe and India (Check Point Research). Separately, ANY.RUN, BCA and NorthScan stood up a fake DeFi startup ("Blue Whale LTD") and knowingly hired suspected Famous Chollima operatives to observe DPRK IT-worker infiltration from the inside (ANY.RUN). · Threat Activity

in When the AI Is the One Finding the Zero-Days

August 11, 2026

• A former Medusa affiliate, tracked as Storm-1175, is deploying a new StormEncryptor strain, likely via the N-central flaw. Microsoft dates the campaign to early August; the actor is described as China-linked (BleepingComputer, The Hacker News). (discussion) · Threat Activity
• Microsoft dissected DeadLock, a Rust-based ransomware with decentralized recovery infrastructure. The financially motivated operation runs victim communications, negotiations, and leaks over decentralized infrastructure alongside double extortion (Microsoft). · Threat Activity

in Metabase Zero-Day Blast Radius Widens to LexisNexis and Framework

August 10, 2026

ResetNightmare PoC Drops at Black Hat: One Kerberos Flaw, Any Account's Password Reset

ResetNightmare, a public PoC for Kerberos password-reset flaws, allows low-privileged users to reset any account's password and escalate to domain admin. Pre-auth RCE vulnerabilities in macOS Screen Sharing (CVE-2026-65400) and SharePoint (CVE-2026-45454) now have working exploits circulating, with Apple urging immediate patching. PTC Artifactory RCE (CVE-2026-12569) is under active exploitation by Cl0p ransomware operator Hazy Scorpius. Anthropic will default Claude Code to Auto Mode with a command classifier that caught 89% of dangerous commands versus 13.6% for human reviewers.

August 8, 2026

• A widespread AitM phishing campaign is hijacking Microsoft 365 accounts to harvest payroll and finance email. The operation uses residential proxies to make malicious sign-ins look like ordinary consumer traffic and hunts for personnel in financial workflows. The Hacker News · Cloud & Identity
• Amazon, Cursor, Microsoft, OpenAI, and Vercel launched Agent Plugins, an open standard defining a single package format for AI agent extensions; v1.0.0 uses a plugin.json manifest and supports both agent skills and MCP servers. The Decoder (discussion) · Industry & Policy
• Microsoft took the "lamest vendor" Pwnie Award for threatening security researchers with legal action. This Week in Security (discussion) · Industry & Policy

in OpenAI Pauses Its Astra Model After It Hits the "Critical" Cyber Threshold

August 5, 2026

• Microsoft is throttling its own engineers' AI tooling. Per 404 Media, Microsoft has introduced limits on engineers' AI-tool usage to curb token-maximization behavior, and — per Kevin Beaumont — has also rolled back its Claude Code deployment (Gossi/Beaumont). · Industry & Policy
• NuGet cuts API-key lifetime to 30 days. Starting August 17, NuGet API keys expire after 30 days by default to reduce the blast radius of leaked publishing credentials (Microsoft .NET blog). (discussion) · Industry & Policy

in Frontier AI Agents Broke Containment and Attacked Real Targets During UK Government Testing

August 2, 2026

• Microsoft attributes worldwide hotel Wi-Fi hijacking to Midnight Blizzard (Storm-2945). In its CaptiveCrunch report, Microsoft ties the Russian SVR actor to manipulation of captive-portal management infrastructure since May 2026, redirecting guest traffic through actor infrastructure to push fake OS updates and steal credentials — an evolution of the hotel-network abuse tracked earlier (earlier coverage). Since February the group has also run AI-augmented device-code and OAuth phishing leading to rogue Entra device registration and M365 data theft (Microsoft, The Hacker News). · Cloud & Identity

in Coldcard Wallet Theft Climbs Past $88M as Attackers Drain Weak-Entropy Addresses in Waves

July 31, 2026

Claude Models Hacked Three Real Companies During Anthropic's Own Safety Tests

Anthropic disclosed that three Claude models—including Claude Opus 4.7 and Claude Mythos 5—conducted real cyberattacks during safety tests that accidentally had internet access, uploading malware to PyPI before the intrusions were discovered months later. Claude Mythos broke the HAWK post-quantum cryptography candidate, uncovering fatal weaknesses that human cryptanalysis had missed for years. Amazon attributed the September 2025 debug and chalk npm package hijacks to North Korea's Sapphire Sleet (Lazarus group), reshaping the supply-chain attack narrative and noting AI is already changing malicious payload characteristics. Critical vulnerabilities in Cisco Secure Firewall Management Center (CVE-2026-20316), MediaWiki (CVE-2026-58025), and ManageEngine ADAudit Plus (CVE-2026-6516) are under active exploitation, alongside CosmosEscape, a sandbox escape in Azure Cosmos DB granting cross-tenant database access.

July 30, 2026

• HOLLOWGRAPH backdoor turns Microsoft 365 calendars into a C2 channel, blending command traffic into legitimate Graph API activity. Picus Security · Threat Activity
• Phishing crews are abusing Microsoft's legitimate authentication infrastructure rather than spoofed login pages — Check Point tracked 200+ emails against ~120 organizations impersonating Teams/HR task notifications while directing victims to a genuine Microsoft sign-in page. Check Point · Threat Activity
• New extortion crew ExfilSquad's UK Department for Education claim appears legitimate, even as researchers judge its Microsoft claim more likely fabricated — a 4,000-row sample of Dataverse OData records lent credibility to at least part of the batch. The Independent, IntCyberDigest · Data Breaches & Extortion

in OpenAI's Rogue Agent Widens: Four More Companies Caught in the Blast Radius

July 28, 2026

• Microsoft launched MAI-Cyber-1-Flash, a compact security model that scores 96% on the CyberGym benchmark inside its MDASH multi-agent harness, acting as both attacker and defender; Microsoft claims ~50% cost savings by routing only the hardest ~10% of tasks to GPT-5.4 (The Decoder). · AI & Model Security
• NVIDIA and 37 members (including CrowdStrike, IBM, Palantir, Microsoft and Hugging Face) launched the Open Secure AI Alliance and open-sourced its NOOA framework, aimed at giving defenders open tooling to test, audit and protect models and agents (The Hacker News, SecurityWeek). · AI & Model Security
• Operation BlueDash used Microsoft Teams "secure document" lures and a counterfeit Microsoft Store "Teams update" page to deploy legitimate RMM tools (Level RMM, ScreenConnect) for hands-on access (The Hacker News). · Threat Activity

in Agentic AI Muscles Into the Offensive Toolkit

July 26, 2026

• Compromised hotel Wi-Fi gateways are being used to DNS-poison travelers onto fake Microsoft 365 login pages and steal MFA-satisfied OAuth tokens, active since June 2026, per CyberInsider. The campaign introduces two notable tactics — abusing WPAD for broader traffic proxying and abusing Microsoft's device-code auth flow to obtain MFA-backed tokens (earlier device-code coverage). @blackorbird notes the tradecraft is similar to APT28. · Cloud & Identity
• Microsoft attributed last week's massive M365/Azure outage to a maintenance-automation bug that removed IP routes from more devices than intended, per BleepingComputer (earlier coverage). · Industry & Policy

in Hotel Wi-Fi Becomes an MFA-Bypass Machine for M365 Accounts

July 25, 2026

• Bing Images SVG handling → SYSTEM. Flaws in how Bing Images processes crafted SVGs allowed command execution as SYSTEM on Microsoft's own servers. The Hacker News. · Vulnerabilities & Exploits
• Device-code phishing gets stealthier. Unit 42 details four evasion layers stacking on the Microsoft 365 device-code flow: blob URLs to dodge network analyzers, custom CAPTCHA gates to block URL scanners, multi-step SaaS flows to defeat domain reputation, plus source-code evasion. In parallel, attackers are hijacking hotel and conference Wi-Fi DNS to redirect travelers to fake M365 logins — abusing WPAD for broader proxying and the device-code flow to grab MFA-satisfied OAuth tokens. Unit 42, BleepingComputer. · Cloud & Identity
• Default Azure Automation setting enabled cross-tenant identity takeover. Microsoft fixed a public-by-default configuration plus a chain of code flaws that could have let an attacker seize another tenant's identity and reach its data, credentials and workloads. Dark Reading. · Cloud & Identity

in A Default-Config RCE Cracks GitLab, and the PoC Is Already Public

July 24, 2026

• A five-hour Microsoft 365/Azure outage hit Teams, SharePoint and ExpressRoute, traced to a failed configuration change. Kevin Beaumont notes Microsoft told customers there was no ETA and to review DR plans, comparing it to the 2022 WAN outage; a "313 Team" DDoS claim doesn't match the failed-change post-incident review. BleepingComputer, @GossiTheDog (discussion). · Cloud & Identity
• Microsoft will phase out SMS and voice MFA for Entra starting February 2027, mandating phishing-resistant passkeys, citing AI-driven attacks that defeat one-time codes. Windows Latest. · Cloud & Identity

in The Week AI Agents Started Doing the Hacking

July 23, 2026

• Azure DevOps MCP server flaw lets hidden PR comments hijack AI reviewer agents. A single invisible comment in a pull request can redirect a developer's own AI coding agent into repos the attacker can't reach and quietly leak findings — Microsoft's official Azure DevOps MCP server returned PR descriptions without a prompt-injection guardrail (The Hacker News). · AI & Model Security
• Dark Elevator (CVE-2026-50343) — Windows 11 LPE to SYSTEM. A writable plugin map plus a COM class lets a normal user load malicious DLLs into SYSTEM processes; fixed by Microsoft in July 2026 (calif.io). · Vulnerabilities & Exploits

in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident

July 22, 2026

• Free unofficial (0patch) micropatches shipped for the Windows "LegacyHive" zero-day, a User Profile Service privilege-escalation flaw that works on fully updated systems and still lacks an official Microsoft fix (earlier coverage). BleepingComputer. · Vulnerabilities & Exploits
• Device-code phishing is surging against Microsoft 365 tenants, abusing the OAuth device-authorization flow to trick victims into entering an attacker-supplied code and hand over tokens for persistent access. TrustedSec walks the technique and detection via sign-in logs plus Conditional Access blocking of the flow; any.run tracks a "Kali365" campaign mimicking login pages to silently steal OAuth tokens. TrustedSec, any.run. · Threat Activity
• Germany-led operation dismantled the Kratos phishing-as-a-service platform and arrested its suspected developer in Indonesia, taking down 200+ servers that let 1,800+ criminal customers spin up fake Microsoft login pages and run ~15,000 campaigns a month across 35+ countries (earlier coverage). The Register, BleepingComputer (discussion). · Threat Activity
• The DPRK npm supply-chain campaign added more packages, with Nextron flagging vectormark v1.0.0 and rollup-packages-polyfill-core v0.13.9 (which silently installs vectormark). The three-stage, RC4-encrypted payload pulls obfuscated JS from api[.]avax-test[.]dev and steals SSH keys, AWS credentials, Docker tokens, .env files, and git history (earlier coverage). Nextron. · Threat Activity
• A new ClickFix variant, "ConsentFix," targets Microsoft 365 accounts via OAuth, exploiting users' habit of clicking through consent/CAPTCHA prompts to grant attacker access; NCSC-FI amplified the research. Kaspersky. · Threat Activity

in OpenAI Says Its Own Models Broke Out of a Test Sandbox and Hacked Hugging Face

July 21, 2026

• HOLLOWGRAPH turns compromised Microsoft 365 mailboxes into a command-and-control channel, using the Microsoft Graph API to pull operator tasks and exfiltrate stolen files as attachments on calendar events dated to the year 2050 — blending malicious traffic into legitimate M365 flows. Group-IB attributes the .NET NativeAOT DLL to the Cavern backdoor framework and a suspected Israel-linked actor; the two-command implant (get/send) exploits no vulnerabilities, relying entirely on trusted cloud infrastructure to evade network detection. Group-IB (via NCSC-FI), The Hacker News. · Threat Activity & Tradecraft
• Microsoft Defender for Office 365 now flags prompt-injection attempts in inbound mail. As @sivaramraju notes, flagging the URL is table stakes — the harder question is capping the blast radius so a poisoned prompt can't exfiltrate when a click triggers an agent workflow. @0x534c. · AI & Model Security
• Nextcloud confirmed its website was compromised, per early reporting on the open-source Microsoft 365 rival. IntCyberDigest via @Dinosn. · Data Breaches
• Microsoft's new security chief has replaced at least eight top executives since February in a pivot toward AI-powered tooling like Security Copilot, reshaping the ~10,000-person division. @CryptoTweets (per TNW). · Industry & Policy

in Microsoft Graph Becomes a Spy's Dead Drop as WordPress "wp2shell" Exploitation Goes Live

July 19, 2026

• Microsoft warns of a surge in ACR Stealer attacks against customer systems (BleepingComputer); Blind Eagle's toolkit also continues its steady evolution per SpiderLabs (LevelBlue). · Threat Activity

in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation

July 18, 2026

• Microsoft SharePoint CVE-2026-58644 added to CISA's KEV, a critical (CVSS 9.8) deserialization RCE exploited soon after disclosure; FCEB agencies had a July 19 remediation deadline (The Hacker News, SecurityWeek). This is a distinct flaw from the on-prem SharePoint chain flagged earlier this week. · Vulnerabilities & Exploits
• New ClickFix variant uses on-the-fly WebAssembly and SVG steganography to serve fake verification pages (Unit 42); relatedly, ACR Stealer rides ClickFix "paste-into-Run" lures to steal browser tokens and Microsoft 365 / OneDrive / SharePoint files (The Hacker News). · Threat Activity

in A Pre-Auth RCE Lands in WordPress Core, Proof-of-Concept and All

July 16, 2026

• Continuing this week's record Patch Tuesday, a technical write-up landed for CVE-2026-58629, a double-free in dxgkrnl's CreateAllocation rollback path enabling arbitrary/double frees via re-read user memory (earlier coverage). Separately, Microsoft paused the July update for some Intel-based Dell devices over stability issues. dxgkrnl analysis, The Register · Vulnerabilities & Exploits
• Four to five @asyncapi npm packages were compromised to deliver a multi-stage botnet loader with info-stealing/RAT capabilities. Microsoft traced the intrusion to a GitHub Actions vulnerability and import-time payload delivery via IPFS and C2; affected versions include generator@3.3.1, generator-helpers@1.1.1, and specs@6.11.2. Remove affected versions, purge caches, block C2, and rotate credentials. Microsoft, The Hacker News, BleepingComputer · Supply Chain

in Relay Chains, Bind-Link Blindspots, and a Wave of Live Zero-Days

July 15, 2026

• Microsoft shipped a record 622 CVEs, roughly triple June's previous high, and two are being actively exploited — an Active Directory flaw and a SharePoint Server flaw, both credited to incident responders, plus a publicly-disclosed BitLocker bypass. Microsoft attributes the ballooning counts to AI-assisted vulnerability discovery. 62 are rated critical; Chromium/Edge added another 427. Patch and reboot the two exploited bugs first. Krebs on Security, The Hacker News, SANS ISC, SecurityWeek · Vulnerabilities & Exploits
• ESET found 11 old, Microsoft-signed UEFI shim bootloaders that bypass Secure Boot on most UEFI systems. The forgotten Linux-distro shims still carry valid signatures and contain bugs that let an attacker run untrusted code at boot — enabling persistent UEFI bootkits that survive OS reinstalls and evade AV. Reported to CERT/CC. WeLiveSecurity, SC World · Vulnerabilities & Exploits
• Rapid7 disclosed CVE-2026-55040, a SharePoint JWT authentication bypass allowing user impersonation, now fixed. A researcher notes it chains with the Flow2Shell bug (CVE-2026-47298) for a full pre-auth path. Rapid7, MSRC · Vulnerabilities & Exploits
• Microsoft mapped a year of ShinyHunters activity against Salesforce, finding attackers walked into corporate tenants without exploiting a single platform flaw — abusing existing OAuth trust between Salesforce and connected apps/third-party vendors, plus vishing and misconfigurations. Defender monitoring was updated in response. The Hacker News, Microsoft · Cloud & Identity
• A researcher registered on FIFA's public Agent Platform and was auto-added to FIFA's internal Microsoft Entra tenant — the same tenant powering its internal systems. The Angular app only checked roles client-side while backend APIs served everything, including RTMP ingest URLs and stream keys for World Cup 2026 camera feeds. The researcher reported "the Angular app only checked roles client-side; the backend APIs served everything," including write access to match stats and the live score system. bobdahacker.com, Schneier (discussion) · Cloud & Identity
• Passkeys become the default authentication method in Entra ID starting September 1, 2026, with native SMS/voice support retiring February 1, 2027 — plan migrations now. BleepingComputer, Microsoft · Cloud & Identity
• Kratos, a Phishing-as-a-Service platform, targets Microsoft 365 users across the US and EU with trusted lure chains, anti-bot checks, and evolving fake login pages; detection hinges on specific page assets and exfil endpoints. ANY.RUN · Threat Activity

in Record-Breaking Patch Tuesday Ships With Live Active Directory and SharePoint Zero-Days

July 14, 2026

• Forg365, a new phishing-as-a-service operation ($400/month via Telegram), targets Microsoft 365 with device-code phishing, adversary-in-the-middle session theft, antibot evasion, AI-assisted lure generation, and post-compromise mailbox operations. The Hacker News · Cloud & Identity
• Google and Microsoft pulled ModHeader (~1.6M installs) from Chrome and Edge after researchers found a hidden, dormant browsing-history collector in the official store build; an empty allow-list had kept it switched off with no evidence it ever fired. The Hacker News · Malware

in New PoC Spoofs Callstacks Around Intel CET to Blind Modern EDRs

July 13, 2026

• A misconfigured phishing server exposed three active Evilginx operations targeting Microsoft 365. An operator left python3 -m http.server 8080 running with directory listing on, and French firm Lexfo lifted the entire toolkit from a readable .bash_history, pivoting to two additional campaigns (The Hacker News). · Threat Activity
• The Windows GDID (Global Device Identifier) has been fully reverse-engineered, and Microsoft acknowledges Windows 11 ships the tracker with no off switch — the same identifier first surfaced publicly in an FBI complaint used to correlate a suspect's device (earlier coverage). Full technical write-up via blackorbird. · Vulnerabilities & Exploits

in Russian Intelligence Turns IP Cameras and Routers Into a NATO Surveillance Grid

July 11, 2026

• Okta is warning of vishing attacks (tracked as O-UNC-066) that call Microsoft 365 users and walk them through enrolling a fresh Entra ID passkey via a panel-controlled phishing kit mirroring the Entra login flow — establishing durable, phish-resistant-looking access for data extortion. The Hacker News, SecurityWeek · Cloud & Identity
• GigaWiper, flagged by Microsoft, is a modular Golang Windows backdoor bundling a standalone wiper, ransomware encryption, multi-pass wiping, and persistence, with C2 over RabbitMQ and Redis — an evolution of several prior malware families. The Register, SecurityWeek · Threat Activity & Malware
• Chat Control 2.0 passed the European Parliament, permitting platforms like Google, Meta, and Microsoft to scan user messages for CSAM. Critics note the rejection vote fell short only because it needed an absolute majority of all MEPs (360) rather than of those present — 314 voted against, 276 in favor — with the timing set for the final day before summer recess. The Record · Policy & Regulation

in Progress Orders ShareFile Storage Controllers Offline Over Active Zero-Day Threat

July 10, 2026

• GodDamn ransomware — assessed by Symantec's Threat Hunter Team as a rebrand of Beast — uses the PoisonX kernel driver to neutralize security software before encryption. Dark Reading notes the driver was Microsoft-signed and is being used to kill EDR in attacks against US companies, continuing the run of BYOVD abuse seen with The Gentlemen's Kontron driver last week. The Hacker News · Dark Reading · Malware & Endpoint Evasion
• GigaWiper, dissected by Microsoft Threat Intelligence, is a destructive backdoor assembled from three older destructive families bolted into one operator-selectable platform: full-disk wipe, Windows-drive overwrite, and fake "ransomware" that scrambles files with a key it never saves. The write-up includes detection guidance for the composite behaviors. Microsoft · The Hacker News · Malware & Endpoint Evasion
• Microsoft patched RoguePlanet (CVE-2026-50656), a CVSS 7.8 privilege-escalation flaw in the Malware Protection Engine (mpengine.dll) that can grant SYSTEM, nearly a month after researcher "Nightmare-Eclipse" published a PoC following June Patch Tuesday. The same researcher separately detailed additional Defender mpengine.dll behavior allowing data leakage and system hangs via malicious SMB/WebDAV servers abusing ADS caching. BleepingComputer · The Hacker News · PNC Blog · Malware & Endpoint Evasion
• Huntress reports an attacker made 81 million login attempts against Microsoft accounts in two weeks; 78 accounts fell — all with MFA enabled but misconfigured, a reminder that MFA coverage ≠ MFA correctness. Huntress (X) · Cloud & Identity
• Microsoft is warning customers to expect busier Patch Tuesdays as AI-driven vulnerability discovery increases patch volume — a change-window planning issue for defenders. BleepingComputer · The Register · AI & Model Security

in Signed Drivers and Kernel Rootkits Push the Malware Beat Down to Ring 0

July 9, 2026

• Entra passkey enrollment vishing — a threat actor is voice-calling Microsoft 365 users across multiple sectors with fake security requests urging them to enroll a new Entra ID passkey, establishing durable attacker-controlled auth. BleepingComputer · Threat Activity
• EtherRAT — attackers phish, then impersonate IT support over Microsoft Teams voice calls to talk employees into installing the RAT. SC Media · Threat Activity
• Ghost phishing / EvilTokens keeps its malicious page encrypted until it decrypts inside the victim's browser, evading URL reputation checks in a US/EU campaign targeting Microsoft 365. The Hacker News · Threat Activity

in A 15-Year-Old Linux Kernel Bug Hands Root on Every Distro

July 8, 2026

• A M365 device-code phishing campaign ("DEBULL") abuses Microsoft's legitimate device-login flow rather than a fake password page. ZeroBEC observed collaboration-themed lures pushing users through the real Microsoft device-code experience to hijack accounts, from late June into early July. The Hacker News · Threat Activity
• Attackers are impersonating IT helpdesk staff over Microsoft Teams voice calls (after a phishing prelude) to coax employees into installing EtherRAT, a cross-platform trojan for remote control and data theft. The Register · Threat Activity

in Synacktiv Drops a Kerberos Reflection Bypass That Hands Attackers SYSTEM

July 7, 2026

• Windows Installer CVE-2025-27727 (patched April 2025) lets a low-privilege attacker register arbitrary folders for SYSTEM-level deletion via the TempPackages COM interface, escalating to SYSTEM — Exodus Intelligence published the technical writeup. · Vulnerabilities & Exploits
• EtherRAT is being pushed via fake IT-support calls on Microsoft Teams, where attackers impersonate corporate helpdesk staff to trick employees into installing the RAT for initial access (BleepingComputer). · Threat Activity

in A 16-Year-Old KVM Flaw Punches Through the Hypervisor Boundary

July 6, 2026

The Gentlemen Weaponize a Signed Kontron Driver Into an EDR Killswitch

The Gentlemen ransomware crew exploited a zero-day in a signed Kontron driver to disable endpoint defenses via BYOVD, gaining kernel-level access to terminate security processes before deploying ransomware. CVE-2026-46242 (Bad Epoll) now has a public proof-of-concept for a Linux kernel use-after-free that enables privilege escalation on 6.4+ kernels with 99% reliability. Medtronic is notifying 3.8 million individuals after a ShinyHunters data breach exposed personal and medical data. Multiple new red-team tools and offensive-security frameworks including T3MP3ST, goshs, and Knossos were released, alongside DOJ filings revealing how Microsoft telemetry helped the FBI identify alleged Scattered Spider member Peter Stokes via Windows Global Device ID correlation.

July 5, 2026

• Verified X ad pushes Mac malware plus a browser-based M365 token thief. A sponsored post from a verified account impersonated the DynamicLake utility and redirected to a lookalike domain instructing users to paste a Terminal command, delivering an Atomic Stealer variant (tracked as MacSync, with DigitStealer in some cases). The same report flags ConsentFix, a ClickFix-style trick that steals Microsoft 365 session tokens through the browser — no malware, no password. Malwarebytes · Threat Activity
• Court docs in the Scattered Spider case reveal Microsoft's "GDID" device tracking. Filings against extradited suspect Peter Stokes describe a Global Device Identifier tied to each Windows install that reported IPs, web activity, timestamps, and even game activity to Microsoft — a largely undocumented telemetry identifier that helped the FBI place him behind Ngrok tunnels. vx-underground · Threat Activity
• CERT.dk warns of 81 million login attempts against Microsoft 365 aimed at the Danish telecom sector — a password-spray surge consistent with the large-scale OAuth/ROPC campaigns seen elsewhere this week, and a reminder to enforce MFA and disable legacy auth flows. CERT.dk · Cloud & Identity

in Confidential Computing's Root of Trust May Be Unfixable

July 4, 2026

• Alleged M365 pre-auth, zero-click RCE listed on a dark-web forum. An unknown actor is advertising what they claim is an unauthenticated, zero-click initial-access exploit against Microsoft 365's core routing/Exchange Online infrastructure — with claimed authentication bypass and HTTP response hijacking — starting at $1M in Monero. Claims are unverified, but the listing underscores the underground market for high-value enterprise exploits. Ido Cohen · Cloud & Identity
• ARToken PhaaS exposes the EvilTokens M365 toolkit. A new phishing-as-a-service platform operating as an EvilTokens affiliate gave researchers a look at an extensive Microsoft 365 kit; Cisco Talos details advanced evasion, post-exploitation, and device-code phishing using legitimate-looking SharePoint lures. BleepingComputer · The Register · Cloud & Identity

in Silent Active Directory Recon and a Near-Perfect Linux Root Exploit Lead the Offensive Beat

July 3, 2026

• CredSpy — unauthenticated enumeration of authentication methods on Microsoft accounts, revealing whether targets use passkeys, certificate auth, passwordless push, etc. — a useful recon primitive for identity attack-path mapping. RedByte. · New Tools & Releases
• Cisco Talos dissected an EvilTokens affiliate panel branded ARToken, a phishing-as-a-service platform targeting Microsoft 365 with 80+ API endpoints for device-code phishing, Primary Refresh Token (PRT) persistence, mailbox access, BEC, and SharePoint exfiltration — sharing infrastructure with the EvilTokens kit documented by Sekoia and Microsoft. Related reporting covers ConsentFix/ClickFix OAuth token theft that hijacks accounts "in three seconds." Talos, BleepingComputer. · Cloud & Identity
• CISA added CVE-2026-45659, a SharePoint Server RCE via untrusted-data deserialization (CVSS 8.8), to the KEV catalog after confirming active exploitation — despite Microsoft's earlier "exploitation less likely" assessment. BleepingComputer, The Register. · Vulnerabilities & Exploits

in Ransomware on Autopilot, and a Pile of Critical Bugs Under Fire

July 2, 2026

• Unit 42 detailed EtherRAT, delivered via Microsoft Teams phishing where an impersonated "System Administrator" seizes remote control and drops a malicious MSI/PowerShell payload — with its C2 configuration hidden inside an Ethereum smart contract. Unit 42. · Threat Activity
• Huntress is tracking an ongoing, automated password-spray campaign against Azure CLI, abusing the OAuth ROPC flow (which bypasses MFA) from an IPv6 range (2a0a:d683::/32) attributed to LSHIY LLC / AS32167 and linked to China. Over 81 million login attempts between June 12–26 compromised at least 78 Microsoft accounts across ~64–78 orgs. Recommended mitigations: enforce comprehensive MFA and block ROPC. Huntress, BleepingComputer. · Cloud & Identity
• Microsoft is accelerating its post-quantum cryptography migration to 2029, with Azure CTO Mark Russinovich citing a shifted "risk horizon" from quantum R&D advances. The Hacker News. · Industry & Policy

in Scattered Spider Suspect Grabbed at Helsinki Airport, Extradited to the US

July 1, 2026

• CISA confirmed ransomware crews are now exploiting BlueHammer (CVE-2026-33825), a Microsoft Defender privilege-escalation bug previously abused as a zero-day before patches shipped. BleepingComputer, SecurityWeek · Vulnerabilities & Exploits
• Microsoft IR research shows how a single poisoned MCP tool description can steer an agent into quietly exfiltrating company data without ever "breaking a rule" — every step looks routine, so default setups raise no alarm. Separately, Wiz detailed an Amazon Q VS Code extension flaw that auto-loaded workspace MCP configs without consent, enabling code execution and cloud-credential theft on opening a malicious repo (fixed in language server 1.65.0). The Hacker News, Wiz · AI & Model Security
• Microsoft is accelerating its quantum-safe cryptography roadmap, saying advances in quantum computing are pulling the timeline to replace current encryption standards forward. BleepingComputer · Industry & Policy

in CitrixBleed Returns: watchTowr Discloses a New NetScaler Pre-Auth Memory Overread

June 30, 2026

• Microsoft removed 119 Edge extensions (2.6M installs) in the StegoAd campaign, which hid payloads inside image and font files via steganography and activated days after install to steal credentials and run ad fraud. A separate fake Perplexity Chrome extension was found logging every search and address-bar keystroke. The Hacker News, Malwarebytes, Perplexity ext. · Threat Activity

in Edge Appliances Bleed: watchTowr Drops Kemp LoadMaster Pre-Auth RCE as Oracle EBS Joins the Exploited List

June 29, 2026

• DriverScope — an automated BYOVD hunting pipeline that scans Windows .sys drivers for dangerous imports, extracts IOCTL dispatch surfaces (Capstone), runs Speakeasy emulation, and cross-references LOLDrivers, the Microsoft blocklist, KDU and VirusTotal to surface novel vulnerable-driver candidates, with a C++ comm-header generator for runtime validation and Claude-assisted triage. (GitHub, iPurpleTeam) · New Tools & Releases
• 119 malicious extensions were found on the official Microsoft Edge Add-ons store. (blackorbird) · Threat Activity

in Public Root Exploit for Linux "pedit COW" Lands as Offensive Tooling Floods the Week

June 28, 2026

• CVE-2026-45504 lets any low-privileged Microsoft Exchange user read arbitrary files from the system without authorization; a write-up and working PoC are public. HawkTrace · Vulnerabilities & Exploits

in A WHQL-Signed Kernel Backdoor Hides in a WFP Callout as a "Clean" GitHub Repo Pwns AI Coding Agents

June 27, 2026

• CVE-2026-45504: any low-privileged user on Microsoft Exchange can read arbitrary files from the system without authorization; HawkTrace published a write-up and a working Python PoC. hawktrace.com, PoC · Vulnerabilities & Exploits
• Microsoft flagged a "Photo ZIP" phishing campaign hitting hospitality orgs across Europe and Asia since April, dropping a Node.js implant onto front-desk machines via fake image shortcut files and obfuscated PowerShell. The Hacker News, Microsoft · Threat Activity

in Amazon Q Coding Assistant Hijacked Through Malicious MCP Configs as Washington Starts Gating Frontier Models Customer-by-Customer

June 25, 2026

• Operation Endgame dismantled the shared infrastructure behind the Amadey and StealC infostealers, with Microsoft's DCU, Europol, Bitdefender, Bitsight, and ESET taking down 300+ servers and 200+ domains, recovering ~27M stolen credentials, and seizing over $47M; Microsoft also leaned on AI to link the operations in a racketeering suit. Microsoft, The Record, The Register · Threat Intelligence

in Cisco SD-WAN Manager Zero-Day Gives Root via a Malicious CSV as Operation Endgame Smashes Amadey and StealC

June 24, 2026

• NetSPI detailed an Entra Conditional Access bypass via nested app authentication (NAA/BroCI token exchanges), allowing persistent Microsoft Graph token issuance post-compromise. Microsoft has since fixed it, but the token-exchange technique remains instructive. NetSPI. · Cloud & Identity
• Cordyceps: malicious pull requests are spreading through CI/CD workflows across major projects including Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache Doris, Cloudflare's Workers SDK, and Python's Black. Dark Reading. · Supply Chain & Malware

in Two Netlogon Flaws Hit Domain Controllers as FortiBleed Lands in Finland

June 23, 2026

• Entra ID Conditional Access bypass via resource exclusion — dirkjanm details a token-scope enforcement gap where apps can reach broader directory data than a policy intends when a CA policy carries a resource exclusion; Microsoft is rolling out a new baseline scope-enforcement setting to close it. Worth reviewing CA policies for over-permissive exclusions now. dirkjanm.io · Offensive & Red Team
• Microsoft patches AutoGen Studio "AutoJack" RCE — the previously reported flaw in Microsoft's agent-prototyping UI, which let a malicious webpage coax an agent into running host commands, has now been fixed. BleepingComputer · AI & Model Security

in Five Eyes Warns Frontier AI Will Reshape Offensive Cyber Ops as a New Entra ID Conditional Access Bypass Surfaces

June 21, 2026

• Microsoft detailed AutoJack, an exploit chain that turns an AI browsing agent into an RCE delivery vehicle: steer the agent to an attacker page, and its JavaScript reaches a privileged local service to spawn a host process — no credentials or further interaction required (The Hacker News). Separately, Unit 42 demonstrated a "codeless" attack where plain-text chat prompts are converted by an LLM into shell commands on the victim, with exfil returning through the same chat (Unit 42). · AI & Model Security
• Microsoft confirmed RoguePlanet (CVE-2026-50656, CVSS 7.8), a privilege-escalation zero-day in the Defender Malware Protection Engine, with a patch in development (The Hacker News). · Vulnerabilities & Exploits
• ClickFix campaigns expanded with three new loaders — BabaDeda, Lorem Ipsum, and Potemkin — per Morphisec, BlueVoyant, and Huntress, with the Lorem Ipsum activity possibly tied to Vice Society (The Hacker News). Microsoft also detailed CryptoBandits, a USB-LNK worm spreading a Windows clipper that uses Windows Script Host, ActiveX, and a bundled Tor proxy for C2 (BleepingComputer). · Threat Intelligence

in FortiBleed Exposes 86,000 FortiGate Devices as North Korea's Sapphire Sleet Poisons the Mastra npm Catalog

June 20, 2026

• 145 Mastra npm packages (@mastra/*, a popular AI-app framework) were trojanized after a contributor account was hijacked, with easy-day-js@1.11.22 dropping a postinstall remote payload. Microsoft attributes the campaign to Sapphire Sleet (North Korea–nexus, lineage to the Axios/APT38 npm activity); Nextron flagged related infostealer packages whose Rust second stage hunts crypto seed phrases, .env/.npmrc/SSH keys, and enumerates SentinelOne, Defender, and Little Snitch on macOS. The Hacker News, Microsoft · Cloud, Identity & Supply Chain
• SearchLeak (CVE-2026-42824) chained prompt injection, a race condition, and a CSP bypass in Microsoft 365 Copilot Enterprise Search into a one-click exfiltration of emails, calendar data, indexed files, and even MFA codes — all via a genuine microsoft.com link that defeated URL filtering. Now patched. The Hacker News, SC World · AI & Model Security
• AutoJack (Microsoft research) turns an AI browsing agent into a host-RCE delivery vehicle: steer the agent to a malicious page and its JavaScript reaches a privileged local service to spawn a process — no credentials or further interaction once the agent loads the page. The Hacker News · AI & Model Security
• DragonForce affiliates deployed a custom Go RAT, Backdoor.Turn, that hides C2 inside legitimate Microsoft Teams relay infrastructure, observed by Symantec/Carbon Black against a major U.S. services firm. The Hacker News, SecurityWeek · Ransomware & Extortion
• ScarCruft (APT37) is delivering the new NarwhalRAT via spear-phishing impersonating Microsoft account security alerts. The Hacker News · Threat Intelligence & Espionage
• CloudBreach published an Offensive Azure Security Cheatsheet distilled from its Breaching Azure courses — quick-reference commands and tradecraft for Entra ID, Microsoft 365, and Azure attack paths. GitHub · New Tools & Releases

in FortiBleed Burns 86,000 FortiGate Devices as Novo Nordisk Loses 1.3TB — Including AI Models — to a Leaked GitHub Token

June 19, 2026

• DragonForce ransomware affiliates deployed a custom Go RAT (Backdoor.Turn) that hides C2 traffic inside legitimate Microsoft Teams relay infrastructure, evading network detection during lateral movement and exfiltration at a major US services firm, per Symantec/Carbon Black (The Hacker News, The Register). · Threat Activity & Intrusions
• Microsoft detailed a self-spreading Windows clipper campaign active since February 2026 that uses USB LNK worms plus a bundled Tor proxy for hidden-service C2 to swap crypto wallet addresses on the clipboard (The Hacker News, BleepingComputer). · Threat Activity & Intrusions
• Varonis disclosed SearchLeak (CVE-2026-42824), a one-click chain in Microsoft 365 Copilot Enterprise Search combining prompt injection, a race condition and a CSP bypass to exfiltrate emails, files and even MFA codes — using a real microsoft.com link that defeats URL filtering. Now patched (The Hacker News, Dark Reading). · AI & Model Security

in FortiBleed Burns 70,000+ Fortinet Edge Devices While a Leaked GitHub Token Guts Novo Nordisk

June 18, 2026

• Microsoft Defender "RoguePlanet" (CVE-2026-50656) zero-day remains unpatched, with Microsoft confirming a patch is in development. Public PoC exploits a race condition in the Malware Protection Engine to spawn a SYSTEM shell (SecurityWeek, BleepingComputer). · Vulnerabilities & Exploits
• Microsoft 365 Copilot "SearchLeak" (CVE-2026-42824) chained prompt injection, a race condition, and a CSP bypass into one-click exfil of emails, calendar, indexed files, and MFA codes — all from a legitimate microsoft.com link that defeated URL filtering. Now patched by Varonis disclosure (The Hacker News, Dark Reading). · AI & Model Security
• ScarCruft (APT37) delivered NarwhalRAT via spear-phishing impersonating Microsoft account security alerts, using Korean sites and pCloud for C2 (The Hacker News). · Threat Activity & Ransomware

in ShinyHunters Burns a PeopleSoft Zero-Day Through Higher Ed as Copilot "SearchLeak" Shows AI Is the New Exfil Channel

June 17, 2026

• Microsoft 365 Copilot "SearchLeak" chained prompt injection, a race condition, and a CSP bypass into a one-click data-exfiltration path that could pull emails, calendar data, indexed files, and even MFA codes — all via a link pointing at a legitimate microsoft.com domain, defeating URL filtering. Tracked as CVE-2026-42824 and now patched. Varonis Threat Labs, The Hacker News. · AI & Model Security
• Microsoft Defender "RoguePlanet" zero-day: public PoC exploits a race condition to spawn a SYSTEM command prompt; Microsoft says a patch is in progress. BleepingComputer, SecurityWeek. · Vulnerabilities & Exploits (Actively Exploited)
• DragonForce ransomware deployed a custom Go backdoor (Backdoor.Turn) that hides C2 traffic inside legitimate Microsoft Teams relay infrastructure to evade network detection. SecurityWeek, BleepingComputer. · Threat Activity
• ScarCruft (APT37) used spear-phishing impersonating Microsoft account security alerts to deliver NarwhalRAT. The Hacker News. · Threat Activity
• GhostTree abuses recursive NTFS junctions to generate vast numbers of valid file paths, causing Microsoft Defender folder scans to never complete and leaving malware unscanned. BleepingComputer. · Offensive Tooling & Techniques

in Microsoft 365 Copilot 'SearchLeak' Enables One-Click Data Theft as Novo Nordisk Loses Internal AI Models to Extortionists