Exposing Fox Tempest: A malware-signing service operation

Microsoft Security Blog reports multiple high-risk trends: discovery of Fox Tempest, a financially motivated malware‑signing‑as‑a‑service (MSaaS) used by other cybercriminals (e.g., Vanilla Tempest, Storm) to sign and distribute malware including ransomware; Storm‑2949 leveraging credential compromise to achieve cloud‑wide data exfiltration without malware; Kazuar, a modular P2P botnet linked to the Russian actor Secret Blizzard, continuing evolution for persistent espionage; widespread exploitable misconfigurations in cloud‑native AI/Kubernetes apps that can lead to RCE and data leaks; and an