Security - 6

2026 (7)

May (7)

security: What’s new in Microsoft Security: May 2026

Microsoft Security Blog

2026-05-21

Microsoft Security’s May 2026 update says the latest changes expand visibility, control, and protection across broader ecosystems as organizations adopt AI. The post does not list specific product features or fixes in the provided text.

security: Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

Microsoft Security Blog

2026-05-20

Microsoft reports that compromised @antv npm packages were used to deploy the Mini Shai-Hulud payload, which runs during npm install and steals CI/CD secrets from Linux-based automation environments. The malware targets credentials from GitHub, AWS, Kubernetes, Vault, npm, and 1Password.

security: Securing the gaming culture of cultures

Microsoft Security Blog

2026-05-20

The post says gaming platforms and communities have unique security challenges and discusses ways to better protect them. It is a Microsoft Security Blog article focused on securing gaming culture and platforms.

security: Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow

Microsoft Security Blog

2026-05-20

Microsoft announced two open-source tools, RAMPART and Clarity, aimed at adding safety checks to agent development workflows. The post frames the need around enterprise AI agents that can access data, execute code, and take actions across connected systems.

security: Exposing Fox Tempest: A malware-signing service operation

Microsoft Security Blog

2026-05-19

Microsoft says Fox Tempest is a financially motivated threat actor running a malware-signing-as-a-service operation used by other cybercriminals to help distribute malicious code, including ransomware. The service has been linked to groups such as Vanilla Tempest and Storm.

security: How Storm-2949 turned a compromised identity into a cloud-wide breach

Microsoft Security Blog

2026-05-18

Microsoft describes how Storm-2949 used stolen credentials to move from identity compromise to broad cloud data theft without malware. The incident highlights abuse of trusted systems and the difficulty of detecting activity that stays within normal cloud authentication flows.

security: How to better protect your growing business in an AI-powered world

Microsoft Security Blog

2026-05-18

Microsoft Security Blog says growing businesses should use built-in security to help keep operations running, protect customer trust, and support growth in an AI-driven environment.