Latest cybersecurity reporting from selected sources.

Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes

Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs

North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to Microsoft security researchers

Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools

Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading

AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication

RedVDS cyber-crime-as-a-service platform powering phishing, BEC attacks and other fraud has cost victims millions

Microsoft systems analyze over 100 trillion daily signals, suggesting dramatically increasing AI-driven cyber-threats

Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs

A new Microsoft AI agent, named Project Ire, is able to autonomously classify malware at a global scale with a high level of precision

Ukraine’s CERT-UA has identified a new AI-powered malware, dubbed “LameHug,” which executes commands on compromised Windows systems in cyber-attacks, targeting the nation’s security and defense sector

Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple email

Microsoft has announced plans to expand cloud and AI infrastructure in the EU, increasing data center capacity by 40% by 2027

Microsoft has blocked fraud worth $4bn as threat actors ramp up AI use

A new phishing campaign has been identified using Havoc to control infected systems, leveraging SharePoint and Microsoft Graph API

Barings Law is planning to sue the two tech giants over numerous alleged violations of data misuse, including for AI training

Tenable detailed two privilege escalation vulnerabilities in the Azure Health Bot Service, one of which has been rated critical

HotPage manipulates browser traffic by hooking into network-based Windows API functions

The package posed as an API management tool and downloaded trojanized Windows binaries

A Microsoft report found that China-affiliated actors are publishing AI-generated content on social media to amplify controversial domestic issues in the US