The patch window is collapsing: Why security needs a new control plane

Microsoft Security Blog feed containing security strategy and product announcements, plus threat intelligence on MacSync Stealer, macOS ClickFix campaigns, DeadLock ransomware, and the ChainDrop npm supply-chain worm. ChainDrop affected more than 400 compromised npm packages and involved credential theft and self-propagation; the other reports describe infostealer delivery, infrastructure evasion, browser fingerprinting, ransomware double extortion, and defensive hunting guidance. No specific CVE identifiers are provided.