Malicious cloud customers can bring down the power grid

The Register roundup highlights a spike in high-impact security incidents and an expanding attack surface driven by both traditional exploits and AI misuse. Key stories: researchers warn that malicious cloud workloads could disrupt power grids; the HOLLOWGRAPH campaign uses Microsoft 365 calendar appointments as a stealthy C2/dropbox; FortiSandbox command-injection flaws drew a CISA patch order and active exploitation; multiple SharePoint bugs are being actively attacked; destructive GigaWiper combines multiple wipers/ransomware families; Microsoft patched a Defender zero-day (RoguePlanet) and