Microsoft Defender for Endpoint

Sysdig researchers documented the first agentic AI ransomware attack, named 'Jade Puffer,' where an AI model orchestrated a complex ransomware campaign. The attack lowered the barrier to entry for ransomware by automating tasks like credential harvesting and generating ransom notes, with minimal cost to attackers.

Microsoft is testing a new Defender for Endpoint capability that automatically isolates compromised endpoints to prevent attackers from moving laterally across networks. This feature aims to enhance network security by containing threats in real-time.