Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
2026-07-19T02:52:13Z•f0515011c42a99445fc6059569be6b55f33c11dff344e85fecb28d1cfcc9fc75
ACR StealerAI agentsBLUERABBITBlack Hat USA 2026CI/CD compromiseClickFix lureDefender ExpertsEntra IDGigaWiperOAuth abuseSFISecure Future InitiativeShinyHuntersbrowser tokenscredential theftdestructive malwareimport-time payloadleast privilegenpmpasskeyssupply-chainthreat intelligence
What happened
Collection of Microsoft Security Blog posts (July 2026) covering multiple active threats and defensive guidance: observed ACR Stealer campaigns using ClickFix lures to exfiltrate browser credentials, tokens, and documents; an npm supply‑chain compromise of AsyncAPI leveraging CI/CD and import‑time payload delivery; analysis of GigaWiper (BLUERABBIT), a destructive backdoor combining multiple malware families; OAuth abuse and account compromise tradecraft linked to ShinyHunters; and guidance on least‑privilege for autonomous AI agents, Entra ID passkey defaults, Defender Experts threat response
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- f0515011c42a99445fc6059569be6b55f33c11dff344e85fecb28d1cfcc9fc75
- Enrichment time
- 2026-07-19T02:52:13Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.