Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks

This collection of Microsoft Security Blog posts (July 2026) covers elevated threat activity and defensive guidance across supply chain attacks, identity/OAuth abuse, credential and token theft, destructive malware, and AI-era access controls. Notable items include analysis of an AsyncAPI npm supply‑chain compromise that abused CI/CD and import‑time payload delivery, increased ACR Stealer campaigns using ClickFix lures to exfiltrate browser credentials and tokens, ShinyHunters‑linked OAuth abuse and vishing targeting SaaS, and an in‑depth look at GigaWiper (aka BLUERABBIT) — a destructive back