CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms
2026-06-25T14:52:20Z•dec7cdd8160603e227c50a67ce8eaf01cb09d16e039bc079f65b72fc8a4f6020
AI-agent-RCEAmadeyAutoGen StudioAutoJackCNAPPMDASH','agentic-vulnerability-detection'Sapphire SleetStealCTorclipboard-theftcloud-risk-managementcrypto-clipperguarding-AI-memoryinfostealerlocalhost-abusemastramodel-memory-securitynpmparallel-threat-actorspostinstall-payloadransomwaresupply-chain-compromisetakedownwallet-replacementworm-like-propagation
What happened
Collection of Microsoft Security Blog posts (June 17–24, 2026) covering multiple high-impact security topics: DCU-facilitated takedown of StealC and Amadey infostealer infrastructure; a Mastra npm supply-chain compromise (Sapphire Sleet) that infected 140+ projects via postinstall payloads; a Crypto Clipper campaign using Tor, clipboard theft/wallet replacement and worm-like propagation; AutoJack — a novel exploit chain that lets a malicious webpage leverage AI browsing agents and localhost services (e.g., AutoGen Studio MCP WebSocket) to achieve remote code execution on the host; research and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- dec7cdd8160603e227c50a67ce8eaf01cb09d16e039bc079f65b72fc8a4f6020
- Enrichment time
- 2026-06-25T14:52:20Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.