Microsoft Threat Intelligence has identified an active multi-stage intrusion campaign targeting organizations in the hospitality and hotel industry since April 2026. We’ve observed this activity ...

Install pnpm and a JavaScript runtime (Node.js, Bun, or Deno) in a single GitHub Actions step. If your package.json declares devEngines.runtime, the action picks up the runtime and version from there ...

Customer stories Events & webinars Ebooks & reports Business insights GitHub Skills ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn ...

June 19, 2026 update: Microsoft assesses with high confidence that this activity is attributable to Sapphire Sleet, a North Korean state actor that primarily targets the financial sector. The ...

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS ...