Women’s History Month: Encouraging women in cybersecurity at every career stage

Microsoft Security Blog roundup covering multiple active threats and defensive guidance: malicious AI browser extensions harvested LLM chat histories and browsing data with ~900,000 installs and exposure across >20,000 enterprise tenants; Tycoon2FA AiTM phishing-as-a-service reached ~500,000 organizations monthly before disruption; signed malware using a stolen EV certificate deployed legitimate RMM tools to gain persistent enterprise access; OAuth redirection flows are being abused to deliver phishing and malware; developer-targeting supply-chain attacks used malicious Next.js repositories to