ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...
ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, ...
The standard defines a common way for software, platforms and AI applications to discover, access and understand ...
This recap covers exploited flaws, exposed systems, malware campaigns, weak defaults, and the security gaps demanding ...
From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...
Supported Releases: These releases have been certified by Bloomberg’s Enterprise Products team for use by Bloomberg customers. Experimental Releases: These releases have not yet been certified for use ...
A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code ...
New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA ...
Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.