Guarding AI memory

Microsoft Security Blog roundup (June 15–22, 2026): multiple high-risk findings across AI agents, supply chain, malware campaigns, and enterprise telemetry. Notable items: AutoJack — a novel exploit chain where a single malicious webpage can achieve host remote code execution by abusing localhost trust, missing authentication, and unsafe parameter handling in AutoGen Studio’s MCP WebSocket; Mastra npm supply‑chain compromise (Sapphire Sleet) that poisoned a package and impacted 140+ projects via postinstall payloads; a crypto clipper campaign combining clipboard theft, wallet replacement, Tor‑