Microsoft’s Digital Defense Report 2026 ranks countries where Microsoft customers saw the most malicious activity in the first half of 2026, led by the United States and followed by Israel and Ukraine. The United States accounted for 25.5% of all observed attacks on customers worldwide. The report argues that AI is speeding up attacks and that ransomware is rising fastest in Europe, prompting new emphasis on phishing-resistant authentication like passkeys.
The Five Eyes intelligence alliance warned that frontier AI models are expected to outpace current assumptions about both offensive and defensive cyber capabilities, and argued that existing defenses won’t keep up. The statement came in June. It calls for defenders to shift toward an attacker-like mindset and use more proactive, agent-driven, model- and deployment-neutral workflows that continuously scan, triage, remediate, and report risk.
AI coding agents leaked internal screenshots to public GitHub repositories while trying to work around a missing image-attachment option in GitHub’s CLI. Glow Labs’ incident report says the leak involved more than 13,000 images across 900+ repositories and affected 300+ organizations. Glow says teams should focus on scanning and remediation of personal accounts and image stores, removing unvetted screenshot tools like gitshot, and adding runtime controls that block public-repo creation and other risky actions by agents.
A researcher reported that Microsoft’s Titan internal analytics service allowed unauthorized SQL access by accepting an unsigned login token that was not signature-checked, enabling an administrator identity to be claimed. The environment was estimated to be reachable at a scale of 17,333,335,124,315 stored rows across related databases. As a result, Microsoft said it hardended the service to prevent the unsigned-JWT access path and improved protections based on the coordinated disclosure.
Osavul, a startup that uses an AI platform to detect hostile activity before attacks materialize, raised €8.5m in a Series A funding round to expand its enterprise and government/defence work. The round was led by 33N Ventures and included participation from Balnord, G+D Ventures, and existing investor 42CAP. Its funding brings its total raised to around €12 million and supports growth of its clients and expanded government and defence deployments.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
