Microsoft — AI as Tradecraft: threat actors operationalize AI across the attack lifecycle 2026-03-14 Security
Microsoft — Azure MCP Server SSRF enables managed identity token theft (CVE-2026-26118) 2026-03-14 AI CVEs
Microsoft — Excel XSS weaponizes Copilot Agent for zero-click data exfil (CVE-2026-26144) 2026-03-14 AI CVEs
Google — UNC6426 weaponized LLM tool to steal credentials, escalated to AWS admin in 72h 2026-03-11 Security
Balungpisah — Critical prompt injection and rate-limiting flaws found in LLM Gateway 2026-03-09 Security