A ransomware investigation finds two unrelated intruders
Microsoft’s June case report warns against forcing every signal into one story.
Capvise Media / Stories
Security
Privacy, identity and trust in a connected world.
110 storiesBrowse by month
An AI incident record needs more than the chat transcript
Microsoft’s April and June guidance explains why context can outlast a single exchange.
AutoJack research exposes a browsing-agent path to local execution
The June report says the affected surface never shipped in a PyPI release.
CERT-In flags active exploitation of a Chrome flaw
Desktop users on Windows, macOS and Linux were urged to apply Google’s patches.
Malicious npm packages imitate internal company namespaces
Microsoft links two May publishing bursts to reconnaissance on developer systems.
Fourteen npm typosquats target cloud and build credentials
Microsoft’s May investigation traces credential theft during installation.
The Gentlemen ransomware pairs encryption with multiple routes across a network
Microsoft’s May report examines an affiliate-driven operation.
Fake GPU utilities spread through search and AI recommendations
Microsoft describes utility impersonation with persistent remote access.
A compromised firewall can become an identity incident
Two Microsoft investigations connect exposed appliances with internal privileges.
Microsoft releases RAMPART and Clarity for agent development
The May tools address repeatable testing and assumptions made before implementation.
Compromised AntV packages expose build-system credentials
The May report follows malicious releases through downstream dependencies.
Microsoft targets Fox Tempest’s malware-signing service
Microsoft said criminals used the service to make malicious software appear legitimate.