Building your cryptographic inventory: A customer strategy for cryptographic posture management
2026-04-17T08:52:16Z•43b7c4f33e0c1457fc1d8b2cbf13a43c0b037504215fc40cad5afe057a7ed0f8
AI‑enabled phishingAndroidDNS hijackingForest BlizzardMFA bypassMedusa ransomwareNorth KoreaSOHO router compromiseSapphire SleetStorm-1175Storm-2755agentic SOCcredential theftcryptocurrency theftcryptographic inventorycryptographic posture managementdevice code phishingincident responseintent redirectionmacOS intrusionpatchingpayroll theftquantum‑safethird‑party SDKwallets
What happened
Microsoft Security Blog round-up covering multiple high‑risk developments: a sophisticated macOS intrusion by North Korea–linked Sapphire Sleet that steals credentials and crypto; a severe Android intent‑redirection flaw in a widely used third‑party SDK exposing millions of wallets; AI‑enabled device‑code phishing campaigns and broader abuse of generative AI to scale phishing and MFA bypass; SOHO router compromises by Forest Blizzard leading to DNS hijacking and man‑in‑the‑middle operations; high‑tempo Medusa ransomware operations by Storm‑1175 that weaponize recently disclosed web‑facing CVEs
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 43b7c4f33e0c1457fc1d8b2cbf13a43c0b037504215fc40cad5afe057a7ed0f8
- Enrichment time
- 2026-04-17T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.