Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
2026-05-20T19:24:14Z•7394f1d9b5771067793ffa570e13230491707a2e5ccc96ff0cd0fcdb4c6fd7b9
BitLocker-bypassGitHubGitHub-ActionsLinux-kernel-LPEMicrosoftNGINXOAuth-phishingSEPPMailagent-ai-securityincident-responsemalicious‑packagesmalware-signingnpmpoCprivilege-escalationransomwareremote-code-executionsoftware-supply-chainsupply-chainzero-day
What happened
This collection summarizes a broad set of high-impact security stories: Microsoft open-sourced AI-agent testing tools (RAMPART, Clarity) and disrupted a malware‑signing‑as‑a‑service abuse of its Artifact Signing (attributed to Fox Tempest); multiple active supply‑chain compromises (GitHub internal repo access, Grafana TanStack npm compromise, compromised VS Code Nx Console extension, GitHub Actions tag hijack, malicious npm packages and Mini Shai‑Hulud activity) and developer‑workstation/CI secret theft; ongoing malware and intrusion campaigns (Webworm using Discord/MS Graph C2, Trapdoor ad‑ad
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 7394f1d9b5771067793ffa570e13230491707a2e5ccc96ff0cd0fcdb4c6fd7b9
- Enrichment time
- 2026-05-20T19:24:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.