Microsoft a Leader in The Forrester Wave™ for Endpoint Management Platforms

This collection of Microsoft Security Blog posts (June 2026) covers multiple active threats and defensive advances: Microsoft’s DCU executed a takedown of domains supporting the StealC and Amadey infostealers; AutoJack demonstrates a novel RCE chain where a malicious webpage leads an AI browsing agent to achieve remote code execution on the host by abusing localhost access and weak auth; a poisoned npm package (Mastra) from the Sapphire Sleet campaign delivered a postinstall payload to 140+ projects as a supply-chain compromise; a crypto clipper campaign used Tor-based C2 and worm-like spread,