30
30
30
30
60
30
60
Detect and disrupt AI-themed attacks with Microsoft Defender
Microsoft Threat Intelligence reports criminal campaigns impersonating ChatGPT, Copilot, Claude, and DeepSeek in phishing, AiTM, and malvertising attacks reaching 100,000 emails daily.
Microsoft Threat Intelligence observed a growing set of campaigns that abuse trust in popular AI brands: a ChatGPT-themed phishing campaign sent up to 100,000 emails in one day to steal payment card data, and a Claude-themed campaign used adversary-in-the-middle techniques to harvest credentials and access tokens. Other campaigns included malvertising for a fake AI Windows plugin delivering the Vidar stealer and fraudulent DeepSeek installers distributed via GitHub. Initial access broker Storm-3075 used AI-themed malvertising to distribute payloads for multiple downstream actors, and Microsoft notes the AI services themselves were not compromised. Microsoft also details Defender protections such as Safe Links, Safe Attachments, and attack disruption against these multi-stage lures.
65
55
60
30
30
Shadow AI in Financial Services | Risk & Governance
Huntress warns financial services firms that unsanctioned 'Shadow AI' tool use creates data leakage and compliance risks faster than governance controls can keep pace.
Huntress argues Shadow AI — employee use of unapproved AI tools such as ChatGPT and Microsoft Copilot — is spreading across financial services faster than visibility and controls. Uploading regulated customer data into public generative models risks breaches of client confidentiality, data protection rules, and market conduct obligations. The piece recommends secure web gateways, DNS filtering, DLP, application allowlisting, and corporate SSO/MFA for approved tools rather than outright bans, which can push usage onto personal devices.
22
60
57
60
30
55
55
57
30
57
57
60
50
50
57
60
30
45
30
57
Seattle Times and Newsday sue OpenAI and Microsoft for infringement
The Seattle Times and Newsday sued OpenAI and Microsoft for copyright infringement, seeking destruction of datasets and models trained on their journalism.
The Seattle Times and Newsday allege OpenAI used their journalism as training data without permission and that its chatbots reproduce passages of their reporting, seeking destruction of copies of their works, training datasets, and AI models that incorporate them. Microsoft is named as co-defendant because Copilot is built on OpenAI technology. The suit follows similar actions by The New York Times, Ziff Davis, Merriam-Webster, Encyclopedia Britannica, and nearly 400 local newspapers.
40
57
60
30
30
57
30
55