Microsoft discovers new lightweight backdoor that steals cryptocurrency

Ars Technica security feed covering active and emerging threats, including self-propagating USB malware, critical and high-severity vulnerabilities, zero-days, supply-chain compromises, credential and password-vault theft, AI-agent attacks, botnets, and privacy-invasive browser techniques. The items indicate substantial risk across enterprise software, operating systems, connected devices, developer ecosystems, and AI services, but the feed does not provide enough detail to map most issues to specific CVE identifiers.