Microsoft - 4

2026 (4)

May (4)

security: Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

Microsoft Security Blog

2026-05-20

Microsoft reports that compromised @antv npm packages were used to deploy the Mini Shai-Hulud payload, which runs during npm install and steals CI/CD secrets from Linux-based automation environments. The malware targets credentials from GitHub, AWS, Kubernetes, Vault, npm, and 1Password.

security: Securing the gaming culture of cultures

Microsoft Security Blog

2026-05-20

The post says gaming platforms and communities have unique security challenges and discusses ways to better protect them. It is a Microsoft Security Blog article focused on securing gaming culture and platforms.

security: Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow

Microsoft Security Blog

2026-05-20

Microsoft announced two open-source tools, RAMPART and Clarity, aimed at adding safety checks to agent development workflows. The post frames the need around enterprise AI agents that can access data, execute code, and take actions across connected systems.

security: Exposing Fox Tempest: A malware-signing service operation

Microsoft Security Blog

2026-05-19

Microsoft says Fox Tempest is a financially motivated threat actor running a malware-signing-as-a-service operation used by other cybercriminals to help distribute malicious code, including ransomware. The service has been linked to groups such as Vanilla Tempest and Storm.