Improving security posture across the Microsoft partner ecosystem

Collection of Microsoft Security Blog posts (late June–early July 2026) covering product/security updates and active threat intelligence. Key threat briefs: a malicious Chromium extension that spoofs AI branding (Perplexity) to redirect browser searches via MV3 APIs and intermediary infrastructure; a multi-stage Photo ZIP campaign targeting hospitality organizations in Europe and Asia that uses fake image shortcut files to deliver a persistent Node.js implant; a technical breakdown and disruption of StealC and Amadey infostealer infrastructure by Microsoft’s DCU. Defensive and industry items: