Security researchers have identified a technique that exploits tax search registry queries to disable kernel-mode antivirus and endpoint detection and response agents. This attack leverages legitimate Windows registry mechanisms to achieve elevated privilege execution and agent termination.

Researchers have uncovered a significant supply chain attack targeting Axios, a critical HTTP client library with millions of weekly downloads on npm. Attackers successfully trojanized the package, potentially exposing a vast developer ecosystem to malicious code injection.

Law enforcement has secured a guilty plea from an individual who orchestrated an extortion scheme targeting thousands of Windows devices across industrial and SaaS environments. The attack involved remotely locking devices to demand ransom payments from affected organizations.

Security researchers have identified Tycoon2FA, a phishing platform specifically engineered to target C-suite executives and senior leadership. The platform works in conjunction with Venom malware to harvest credentials from high-value targets. This credential theft campaign represents a significant threat to executive accounts with access to sensitive business systems and financial controls.

Microsoft has released an open-source toolkit specifically designed to govern autonomous AI agents, addressing critical compliance and operational safety requirements for organizations deploying agent-based systems. The toolkit includes Agent Governance components, Agent Runtime infrastructure, Agent SRE capabilities, and integrations with Azure AI Foundry Agent Service.

Stryker, a major medical device and equipment manufacturer, has achieved full operational status following a cyberattack in March attributed to Handala, a threat actor linked to Iran's Ministry of Intelligence and Security (MOIS). The attack exploited Active Directory and Microsoft Intune systems, affecting critical healthcare infrastructure.