🧰 microsoft

The items that name it 14

• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.key entities2026-10-26
• China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
  articleas classification.key entities2026-10-23
• Field Notes: Reconstructing an Attacker’s Workflow
  writeupas classification.key entities2026-10-22
• Compromised eMudhra intermediate certificates
  advisoryas classification.key entities2026-10-21
• Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
  articleas classification.key entities2026-10-21
• Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorization
  paperas classification.technologies2026-10-15
• 77 "Evil Twin" Open VSX Extensions
  articleas tools2026-08-08

  Reported on the ChainDrop npm supply chain attack and the Mini Shai-Hulud malware variant

• XBOW: A Shell Is Worth a Thousand Images
  writeupas classification.key entities2026-08-08
• User Accounts and Privilege Management
  articleas tools2026-07-27It is written here as Microsoft: How User Account Control Works - official UAC technical reference.
• Beyond MCP: The New Security Playbook for Coding Agents | Blog | Endor Labs
  articleas tools2026-07-21It is written here as Microsoft (MCP gateway).

  MCP gateway/proxy offering from Microsoft

• Alice and Bob Learn Secure Coding: Chapter 2
  videoas classification.key entities2026-05-11
• Butler
  repoas affected products2026-05-06It is written here as microsoft (used as example org/repo in usage commands: microsoft, microsoft/vscode).

  used as example org/repo in usage commands: microsoft, microsoft/vscode

• SDK security in mobile apps: the attack surface your team didn
  articleas classification.key entities
• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas tools

  Analyzed the malicious mistralai PyPI package's credential stealer and geofenced destructive logic