​​Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report ​​

This Microsoft Security Blog feed highlights multiple active threat and product updates: a ClickFix campaign uses fake macOS utility lures and malicious Terminal commands to deliver infostealers that steal credentials, crypto wallets, and sensitive data; a multi-stage “code of conduct” phishing operation led to AiTM token compromise using fully authenticated attacker-controlled mail; and the high-severity Linux vulnerability CVE-2026-31431 (“Copy Fail”) enables root escalation in cloud and Kubernetes environments with an exploit observed in the wild. The feed also covers defensive and product/