microsoft.com

• Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition

  Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition Written by: Matthew McWhirt, Bhavesh Dhake, Emilio Oropeza, Gautam Krishnan, Stuart Carrera, Greg Blaum, Michael Rudden UPDATE (March 13): Added guidance around abuse or misuse of endpoint / MDM platfo

• Malicious npm packages abuse dependency confusion to profile developer environments

  Malicious npm packages abuse dependency confusion to profile developer environments A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft

• Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17)

  Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17) Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime. We include recommendations for defenders. The post Threat Brief: Escalation

• Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

  Active attack: Dirty Frag Linux vulnerability expands post-compromise risk Dirty Frag is a newly disclosed Linux local privilege escalation vulnerability affecting kernel networking and memory-fragment handling components including esp4, esp6, and rxrpc. The vulnerability enable

• Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

  Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across

• Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow

  Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow The AI systems shipping inside enterprises today are fundamentally different from the ones we were building even two years ago, because they have moved well past answering question

All reports →