Fake malware-signing service Fox Tempest dismantled by Microsoft

Malwarebytes Labs roundup (May 2026) covering multiple high-impact incidents: Microsoft dismantled “Fox Tempest,” a fake malware-signing service that let attackers obtain fraudulent Microsoft certificates to bypass security checks; NYC Health + Hospitals suffered a major third‑party–related breach exposing biometrics, diagnoses and bank details for ~1.8M people; the JDownloader site was compromised and installer downloads were replaced with malware; researchers disclosed Edge’s behavior of loading saved passwords into plaintext memory and Microsoft is changing that behavior; Firefox 151 ships重