Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

A large cluster of high-impact security incidents and disclosures: Microsoft open-sourced AI-agent testing tools (RAMPART, Clarity) and disrupted a malware‑signing‑as‑a‑service operation (attributed to Fox Tempest); multiple supply‑chain compromises (Grafana/TanStack npm, compromised Nx Console VS Code extension, GitHub Actions tampering, Mini Shai‑Hulud npm infections) and widespread credential/CI theft campaigns; active intrusions including a GitHub insider/device compromise (TeamPCP), Webworm backdoors using Discord and Microsoft Graph API, and a major Android ad‑fraud campaign (Trapdoor).