Microsoft Defender email security benchmarking: Key insights from one year of data

This Microsoft Security Blog feed highlights multiple high-priority security findings and guidance from June 2026: a large-scale npm supply‑chain credential‑stealing campaign (Miasma) that compromised 90+ @redhat‑cloud‑services package versions and exfiltrated GitHub, cloud, and local credentials while self‑propagating; a dependency‑confusion campaign using 33 malicious npm packages to profile developer and CI environments; a prompt‑injection vulnerability in the Claude Code GitHub Action that could expose workflow secrets (disclosed and mitigated with Anthropic); an updated taxonomy of seven+