Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
2026-07-21T02:52:16Z•0139d0368f75c61f03f75e572d53e611033edb825790acafc941f0ea01200033
ACR StealerAI agentsAsyncAPIBLUERABBITCI/CD compromiseClickFixDefender Experts','Black Hat USA 2026GigaWiperMicrosoft Entra IDOAuth abuseSecure Future InitiativeShinyHuntersauthentication tokenscredential theftdestructive malwareidentity and accessimport-time payloadleast privilegemisconfigured guest accessnpmpasskeysransomware-likesupply-chaintool bindingvishing
What happened
This Microsoft Security Blog collection (July 2026) highlights multiple high-risk trends: active credential- and token-stealing campaigns (ACR Stealer using ClickFix lures), npm supply-chain compromise of AsyncAPI via CI/CD and import-time payload delivery, OAuth abuse and vishing linked to ShinyHunters, and a destructive backdoor (GigaWiper/BLUERABBIT) combining multiple wiping/ransomware capabilities. It also covers defensive guidance: least-privilege and identity/tool binding for autonomous AI agents, Entra ID updates (passkeys as default and new SMS/voice model), Microsoft Defender Experts
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 0139d0368f75c61f03f75e572d53e611033edb825790acafc941f0ea01200033
- Enrichment time
- 2026-07-21T02:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.