Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
2026-07-21T14:52:27Z•6157f757379c159b1655b7c468c4eed77b4ffeeeb3f7894d83f787ac5a0227f3
ACR StealerAI agentsAsyncAPIBLUERABBITCI/CD compromiseClickFixDefender ExpertsEntra IDGigaWiperOAuth abuseSaaS securitySecure Future InitiativeShinyHuntersauth tokensbrowser credentialscloud hardeningcredential theftdestructive malwareidentity and access managementimport‑time payloadleast privilegenpm supply chainpasskeyssupply chain attacksvishing
What happened
This RSS bundle from the Microsoft Security Blog (July 2026) covers multiple high‑impact security topics and incident analyses: increased ACR Stealer activity (late Apr–mid Jun 2026) using ClickFix lures to exfiltrate browser credentials, auth tokens, and documents; the AsyncAPI npm supply‑chain compromise that weaponized CI/CD to deliver import‑time payloads; GigaWiper (aka BLUERABBIT), a destructive backdoor assembled from multiple malware families; and ShinyHunters‑style OAuth abuse targeting SaaS apps (including vishing and supply‑chain/misconfigured guest access). The feed also includes:
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 6157f757379c159b1655b7c468c4eed77b4ffeeeb3f7894d83f787ac5a0227f3
- Enrichment time
- 2026-07-21T14:52:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.