Meet Rampart and Clarity, Microsoft’s new red team combo AI agents

This CyberScoop feed highlights multiple high-impact supply-chain, credential and malware incidents and broader industry trends. Key items: a poisoned Visual Studio Code extension led to compromise of a GitHub employee device and exfiltration of internal repositories; a major credential leak tied to CISA prompted congressional scrutiny; the Verizon DBIR shows exploited vulnerabilities are the top breach entry point; Mini Shai‑Hulud resurfaced to compromise hundreds of npm packages, steal publish tokens and deploy OS‑level backdoors; Microsoft disrupted the Fox Tempest service that abused code‑