Microsoft

ACR Stealer: Two observed intrusion chains amid increased threat activity

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
The National Interest

Pete Hegseth Called Anthropic a ‘National Security Risk.’ Now CISA Is Using It.

CISA is one of around 100 organizations approved to use Anthropic’s Mythos model, which is far better than human penetration ...
Campus Technology

Cybersecurity Researchers Identify First Fully Autonomous AI-Driven Ransomware Attack

Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing ...