Security - 6

2026 (4)

May (4)

security: Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

Microsoft Security Blog

2026-05-20

Microsoft reports that compromised @antv npm packages were used to deploy the Mini Shai-Hulud payload, which runs during npm install and steals CI/CD secrets from Linux-based automation environments. The malware targets credentials from GitHub, AWS, Kubernetes, Vault, npm, and 1Password.

security: Securing the gaming culture of cultures

Microsoft Security Blog

2026-05-20

The post says gaming platforms and communities have unique security challenges and discusses ways to better protect them. It is a Microsoft Security Blog article focused on securing gaming culture and platforms.

security: Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow

Microsoft Security Blog

2026-05-20

Microsoft announced two open-source tools, RAMPART and Clarity, aimed at adding safety checks to agent development workflows. The post frames the need around enterprise AI agents that can access data, execute code, and take actions across connected systems.

security: How to better protect your growing business in an AI-powered world

Microsoft Security Blog

2026-05-18

Microsoft Security Blog says growing businesses should use built-in security to help keep operations running, protect customer trust, and support growth in an AI-driven environment.