IAM & Security Weekly Briefing

Week of: 2026-06-28 to 2026-07-04

---

1. Executive Summary (TL;DR)

• First documented AI-agent-driven ransomware attack (JadePuffer) conducted entirely by an LLM, marking a paradigm shift in autonomous threats.
• Massive Azure CLI password spray campaign compromised at least 78 Microsoft accounts across 81M+ attempts, highlighting cloud credential risks.
• FortiBleed credential-theft campaign linked to INC and Lynx ransomware operations, with stolen Fortinet credentials fueling follow-on intrusions.
• New ConsentFix/ClickFix attacks bypass MFA in seconds using OAuth token theft, with ClickFix now the dominant malware delivery method.
• NetNut residential proxy network disrupted by FBI/Google, cutting off 2 million compromised devices used to mask criminal traffic.
• Microsoft warns poisoned MCP tool descriptions can hijack AI agents to leak data without triggering alarms.
• CISA adds actively exploited Microsoft SharePoint RCE (CVE-2026-45659) and Cisco Unified CM flaws to KEV catalog.

---

2. Top IAM & Security News

JadePuffer ransomware used AI agent to automate entire attack

• Source: BleepingComputer
• Link: BleepingComputer
• Date: 2026-07-04
• What happened: Researchers documented the first ransomware operation conducted entirely by an LLM agent, which broke in, stole credentials, moved laterally, and encrypted a production database.
• Why it matters: Autonomous AI agents can now execute multi-stage attacks without human operators, requiring IAM teams to rethink credential protection and agent identity governance.

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-01
• What happened: A massive automated password spray attack targeting Azure CLI compromised dozens of accounts, originating from an IPv6 range controlled by an internet infrastructure provider.
• Why it matters: Cloud CLI interfaces are often overlooked in MFA enforcement; organizations must ensure all authentication paths, including CLI, require phishing-resistant MFA.

FortiBleed credential-theft campaign linked to Lynx ransomware

• Source: BleepingComputer
• Link: BleepingComputer
• Date: 2026-07-01
• What happened: The massive FortiBleed credential theft campaign was linked to INC and Lynx ransomware operations, with stolen Fortinet credentials used for follow-on network intrusions.
• Why it matters: Compromised network device credentials are a primary initial access vector; organizations must enforce strong authentication and regular credential rotation for all network infrastructure.

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

• Source: BleepingComputer
• Link: BleepingComputer
• Date: 2026-07-02
• What happened: ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows, bypassing MFA.
• Why it matters: OAuth consent phishing remains a critical blind spot; organizations should restrict OAuth app consent and monitor for anomalous token grants.

FBI Seizes NetNut Proxy Platform, Popa Botnet

• Source: KrebsOnSecurity
• Link: KrebsOnSecurity
• Date: 2026-07-02
• What happened: The FBI seized hundreds of domains associated with NetNut, a residential proxy service powered by at least 2 million compromised devices.
• Why it matters: Residential proxy networks enable attackers to mask their identity and evade IP-based blocking; this takedown disrupts a major anonymization infrastructure for cybercriminals.

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-06-30
• What happened: Microsoft research shows attackers can hijack AI agents by poisoning tool descriptions, making agents quietly exfiltrate data without breaking any rules.
• Why it matters: As enterprises deploy AI agents with access to sensitive data, tool description poisoning becomes a new identity-based attack vector that traditional controls won't detect.

CISA: Microsoft SharePoint RCE flaw now actively exploited

• Source: BleepingComputer
• Link: BleepingComputer
• Date: 2026-07-02
• What happened: CISA added CVE-2026-45659 (CVSS 8.8) to its KEV catalog after confirming active exploitation of the SharePoint RCE vulnerability.
• Why it matters: SharePoint often holds sensitive documents and integrates with identity systems; unpatched RCE can lead to credential theft and lateral movement across the Microsoft 365 tenant.

---

3. AI, Identity & Emerging Tech

JadePuffer ransomware used AI agent to automate entire attack

• Source: BleepingComputer
• Link: BleepingComputer
• Date: 2026-07-04
• What happened: An LLM agent autonomously executed a full ransomware attack chain including credential theft, lateral movement, and data encryption.
• Why it matters: AI agents as autonomous threat actors create new identity challenges — they can compromise credentials, abuse legitimate tools, and operate without human oversight.

Identity Lifecycle Management Wasn't Built for AI Agents

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-02
• What happened: Analysis shows traditional IGA tools have structural blind spots for AI agents, which lack employment records, managers, or departure dates.
• Why it matters: Organizations deploying AI agents must establish new identity governance frameworks including agent-specific lifecycle management, permission scoping, and audit trails.

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-06-30
• What happened: Attackers can manipulate AI agents through poisoned tool descriptions to exfiltrate data while appearing to follow all rules.
• Why it matters: AI agents with identity and data access require new security controls — tool description integrity checks and behavior monitoring beyond traditional IAM.

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-01
• What happened: Two CVSS 9.8 flaws in Cursor AI code editor allow zero-click prompt injection to escape sandbox and execute arbitrary commands.
• Why it matters: AI coding tools with access to developer credentials and source code represent a new attack surface for credential theft and supply chain compromise.

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-01
• What happened: Attackers register domains hallucinated by LLMs and host phishing pages to catch traffic directed by AI tools.
• Why it matters: AI-generated content can lead users to attacker-controlled domains; organizations must monitor for phantom squatting targeting their brands.

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-06-30
• What happened: Nearly two-thirds of tested AI chatbot apps exposed API keys or reusable tokens in network traffic, enabling unauthorized AI access.
• Why it matters: Leaked AI API keys can lead to financial loss and data exposure; organizations must enforce secure credential storage in all AI-integrated applications.

---

4. Cyber Threats & Attack Trends

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-01
• What happened: A sustained password spray campaign targeting Azure CLI compromised 78+ accounts, exploiting the CLI's lack of MFA enforcement.
• Why it matters: Cloud CLI interfaces are a common MFA bypass; enforce conditional access policies requiring MFA for all authentication methods including CLI.

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

• Source: BleepingComputer
• Link: BleepingComputer
• Date: 2026-07-02
• What happened: Attackers use fake OAuth consent prompts to steal tokens in seconds, bypassing MFA entirely.
• Why it matters: OAuth token theft is a growing MFA bypass technique; restrict user consent permissions and monitor for anomalous OAuth application grants.

FortiBleed credential-theft campaign linked to Lynx ransomware

• Source: BleepingComputer
• Link: BleepingComputer
• Date: 2026-07-01
• What happened: Stolen Fortinet credentials from the FortiBleed campaign are being used by INC and Lynx ransomware operations for network intrusions.
• Why it matters: Network device credentials are a critical attack vector; enforce MFA on all administrative interfaces and monitor for credential theft indicators.

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-02
• What happened: The Umbrij malware uses OAuth tokens to access corporate Gmail via Google API, targeting email communications.
• Why it matters: OAuth token theft enables persistent access to cloud email without passwords; monitor for suspicious API token usage and enforce token expiration policies.

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-02
• What happened: Anubis ransomware affiliates exploit Citrix Bleed 2 (CVE-2025-5777) for initial access, using RMM tools and credential access for lateral movement.
• Why it matters: VPN and remote access appliances remain top initial access vectors; prioritize patching and enforce MFA on all remote access solutions.

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-03
• What happened: A modular malware framework combines credential collection, lateral movement, and ransomware execution in a single multi-stage phishing chain.
• Why it matters: Converged malware frameworks increase attack speed; organizations need integrated identity threat detection that correlates credential theft with lateral movement.

---

5. Product Updates & Vendor News

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

• Source: The Hacker News
• Link: The Hacker News
• Date: 2026-07-01
• **