Microsoft Entra ID will make passkeys the default phishing-resistant authentication method starting September 1, 2026, and will retire native SMS and voice authentication on February 1, 2027, citing A…
Google removed a malicious Chromium extension spoofing Perplexity AI after Microsoft researchers found it intercepted users' search traffic and routed queries through attacker-controlled servers. The …
Microsoft Threat Intelligence reported that North Korean state-sponsored actor Sapphire Sleet compromised over 140 packages in the @mastra npm scope, targeting developers building AI coding tools. The…
Microsoft Threat Intelligence reported on June 5, 2026 that Anthropic's Claude Code GitHub Action could expose CI/CD workflow secrets when the agent processed untrusted GitHub content, as the Read too…
Microsoft Threat Intelligence identified a prompt-injection vulnerability in Anthropic's Claude Code GitHub Action that could expose CI/CD workflow secrets, according to the Microsoft Security Blog. S…