Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

Microsoft Security Blog posts (May 2026) highlight multiple active threats and security updates: new Linux local privilege-escalation flaws (notably “Dirty Frag”) expanding post-compromise risk and the high-severity, in-the-wild CVE-2026-31431 (“Copy Fail”); prompt-injection vulnerabilities in AI agent frameworks that can lead to remote code execution; macOS ClickFix campaigns delivering infostealers via fake utilities and malicious Terminal commands; and a large-scale multi-stage phishing campaign causing AiTM token compromise. Microsoft Defender telemetry is actively monitoring exploitation,