Microsoft is enhancing its security offerings with a focus on AI and agent protection. New features include 'Codename MDASH,' an AI-powered system for discovering and remediating complex software vulnerabilities across environments. Additionally, Microsoft Defender now extends endpoint protection to local AI agents, detecting and blocking threats like prompt injection attempts targeting tools such as GitHub Copilot CLI and Claude Code.

Microsoft is introducing new security measures, with a significant emphasis on artificial intelligence and the protection of AI agents. The company is developing an AI-driven system codenamed 'MDASH' designed to identify and address intricate software vulnerabilities across various computing environments.
This new system aims to automate the discovery and remediation of complex security flaws, a critical capability as software environments become increasingly interconnected and sophisticated. By leveraging AI, MDASH is intended to provide a more proactive and efficient approach to vulnerability management.
In parallel, Microsoft Defender is expanding its protective capabilities to encompass local AI agents. This extension means that endpoint protection will now monitor and secure AI tools operating on individual machines.
The updated Microsoft Defender will be capable of detecting and neutralizing threats specifically targeting AI agents. This includes defenses against malicious techniques such as prompt injection, which can manipulate AI models into performing unintended or harmful actions.
The scope of this protection extends to popular AI-powered development tools. Specifically mentioned are tools like GitHub Copilot CLI and Claude Code, indicating that Microsoft is prioritizing the security of AI assistants used in software development workflows.
Prompt injection attacks are a growing concern as AI becomes more integrated into various applications and services. These attacks exploit the way AI models process natural language prompts, potentially leading to the leakage of sensitive information, unauthorized actions, or the generation of malicious code.
By extending Defender's protection to local AI agents, Microsoft aims to provide a more comprehensive security posture for organizations that are increasingly adopting AI technologies. This move reflects the evolving threat landscape and the need for specialized security solutions for AI-driven systems.
The development of 'Codename MDASH' and the enhanced capabilities of Microsoft Defender underscore Microsoft's commitment to addressing the security challenges posed by the rapid advancement and adoption of artificial intelligence.

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC). [...]

Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk. The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers between November 2019 and August 2021. The breach does not affect the security of the company's hardware wallets

A critical arbitrary file upload vulnerability in the Elementor Pro WordPress plugin, tracked as CVE-2026-32475, is being actively exploited to compromise websites. The flaw exists in the plugin's form submission handling function, allowing attackers to upload malicious files.

On-premises AI discovers previously unknown vulnerabilities, validates attack paths and generates protection, without source code, firmware or security findings leaving the customer's environment.

OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, shared answers, and bypassed restrictions, saying it treated the activity as model "misalignment" rather than a security breach. [...]

Plus: Tens of millions of US and Canadian drivers’ licenses go up for sale on the dark web, the US military finally tries to tackle the risk online ad data poses to troops, and more.