Microsoft open-sources tools for designing and testing AI agents

Multiple security developments: Microsoft open-sourced two AI-agent security tools (Clarity for structured design reviews and RAMPART for continuous red-team testing). Law enforcement led Operation Saffron dismantled First VPN—anonymity service used by ransomware operators—seizing servers and domains. A supply-chain compromise in the TanStack ecosystem via a malicious VS Code extension (Nx Console) enabled credential theft and movement through CI/CD, contributing to breaches at GitHub and Grafana Labs and exfiltration of thousands of private repositories. Microsoft confirmed active in-the-wild