Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

2026-05-20T19:24:14Z7394f1d9b5771067793ffa570e13230491707a2e5ccc96ff0cd0fcdb4c6fd7b9
BitLocker-bypassGitHubGitHub-ActionsLinux-kernel-LPEMicrosoftNGINXOAuth-phishingSEPPMailagent-ai-securityincident-responsemalicious‑packagesmalware-signingnpmpoCprivilege-escalationransomwareremote-code-executionsoftware-supply-chainsupply-chainzero-day

What happened

This collection summarizes a broad set of high-impact security stories: Microsoft open-sourced AI-agent testing tools (RAMPART, Clarity) and disrupted a malware‑signing‑as‑a‑service abuse of its Artifact Signing (attributed to Fox Tempest); multiple active supply‑chain compromises (GitHub internal repo access, Grafana TanStack npm compromise, compromised VS Code Nx Console extension, GitHub Actions tag hijack, malicious npm packages and Mini Shai‑Hulud activity) and developer‑workstation/CI secret theft; ongoing malware and intrusion campaigns (Webworm using Discord/MS Graph C2, Trapdoor ad‑ad

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
7394f1d9b5771067793ffa570e13230491707a2e5ccc96ff0cd0fcdb4c6fd7b9
Enrichment time
2026-05-20T19:24:14Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development · Baitaphish