Hermes — Thursday 4 June 2026

1

🔐 security SecurityWeek

76%

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

A simple development setting bypassed protections designed to prevent unauthorized Android apps from accessing Microsoft account tokens, exposing billions of installations. The post Exclusive: How On…

Novelty

82%

Depth

65%

Practical

70%

Surprise

80%

Relevance

90%

https://www.securityweek.com/exclusive-how-one-line-of-code-put-billions-of-microsoft-android-app-downloads-at-risk/

2

🤖 ai The Decoder

72%

Hackers hijacked high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email

Hackers took over prominent Instagram accounts, including the Obama White House page, by simply asking Meta's AI support chatbot to change the email address on file. Two-factor authentication was byp…

Novelty

85%

Depth

55%

Practical

60%

Surprise

90%

Relevance

82%

https://the-decoder.com/hackers-hijacked-high-profile-instagram-accounts-by-simply-asking-metas-ai-chatbot-to-change-the-email/

3

🔐 security SecurityWeek

72%

Meta AI Hands Over High-Profile Instagram Accounts to Hackers

Exploiting a confused deputy weakness, the hackers simply asked the chatbot to link the account to a new email address. The post Meta AI Hands Over High-Profile Instagram Accounts to Hackers appeared…

Novelty

85%

Depth

55%

Practical

60%

Surprise

90%

Relevance

82%

https://www.securityweek.com/meta-ai-hands-over-high-profile-instagram-accounts-to-hackers/

4

📦 m365 Petri IT Knowledgebase

70%

Build 2026: Organizations Can Unlock Enterprise Intelligence with Microsoft IQ

Microsoft has made Microsoft IQ generally available across GitHub Copilot, Microsoft Foundry, and Copilot Studio. Alongside the announcement, the company announced a new family of in-house AI models …

Novelty

75%

Depth

60%

Practical

75%

Surprise

50%

Relevance

92%

https://petri.com/microsoft-iq-ai-enterprise-intelligence/

5

📦 m365 Petri IT Knowledgebase

68%

Build 2026: Microsoft’s MDASH Update Adds Defender Integration to Improve Vulnerability Detection

Microsoft has announced a new update to MDASH that enhances vulnerability detection accuracy and introduces native integration with Microsoft Defender to streamline security operations. The company i…

https://petri.com/microsoft-mdash-defender-vulnerability-detection/

6

🔐 security Microsoft Security Blog

67%

Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign

A large-scale npm supply chain attack compromised over 90 versions of @redhat-cloud-services packages, silently infecting CI/CD environments and developer systems. The malicious code steals credentia…

https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/

7

📦 m365 Microsoft 365 Blog

66%

Introducing Microsoft Scout: Your always-on personal agent

Microsoft Scout is integrated across the Microsoft 365 apps you use every day, keeping it grounded in your flow of work. The post Introducing Microsoft Scout: Your always-on personal agent appeared f…

https://www.microsoft.com/en-us/microsoft-365/blog/2026/06/02/introducing-microsoft-scout-your-always-on-personal-agent/

8

⚡ tech The Verge

66%

Microsoft Build 2026: The 7 biggest announcements

Microsoft just kicked off Build 2026 with a keynote from CEO Satya Nadella and other company leaders. As expected, it was filled with announcements, ranging from new Surface hardware to an always-on …

https://www.theverge.com/tech/941738/microsoft-build-2026-biggest-announcements

9

⚡ tech The Verge

64%

Microsoft’s first advanced reasoning AI is here

Microsoft announced a bunch of new in-house AI models at Build 2026, including a new "flagship" model: MAI-Thinking-1. It's an ambitious step into model development for Microsoft, which introduced it…

https://www.theverge.com/tech/941664/microsoft-ai-model-reasoning-mai-thinking-1-build-2026

10

🔐 security SecurityWeek

63%

Security of 100 AI Agents Tested and Ranked – What You Need to Know

The AI Risk Quadrant evaluates AI agents based on three factors: how vulnerable they are to compromise, the potential impact of a breach, and the strength of their security defenses. The post Securit…

https://www.securityweek.com/security-of-100-ai-agents-tested-and-ranked-what-you-need-to-know/

11

📦 m365 Petri IT Knowledgebase

63%

Microsoft Scout: Autonomous AI Agent with Enterprise Security Controls

Microsoft has introduced Scout at its Build 2026 developer conference, which is an always-on AI agent designed to act as a personal digital coworker. Unlike traditional assistants, Scout can autonomo…

https://petri.com/microsoft-scout-autonomous-ai-agent-enterprise-security/

12

🔐 security Microsoft Security Blog

62%

Microsoft Build 2026: Securing code, agents, and models across the development lifecycle

Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. The post Microsoft Build 2026: Securing code, agents, and models across the development lifecycle …

https://www.microsoft.com/en-us/security/blog/2026/06/02/microsoft-build-2026-securing-code-agents-and-models-across-the-development-lifecycle/

13

🔐 security Schneier on Security

62%

Microsoft Threatening Security Researcher

An anonymous security researcher called “Nightmare Eclipse” has been publishing a series of significant security exploits against Microsoft Windows—including one that breaks BitLocker. Microsoft has …

https://www.schneier.com/blog/archives/2026/06/microsoft-threatening-security-researcher.html

14

🔐 security SecurityWeek

62%

‘HTTP/2 Bomb’ Exploit Knocks Web Servers Offline in Seconds

The default HTTP/2 configuration of major web servers is vulnerable to an attack chain combining a compression bomb and a Slowloris-style hold. The post ‘HTTP/2 Bomb’ Exploit Knocks Web Servers Offli…

https://www.securityweek.com/http-2-bomb-exploit-knocks-web-servers-offline-in-seconds/

15

🔐 security SecurityWeek

61%

The Zero-Knowledge Threat Actor and the End of Responsible Disclosure

AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code. The post The Zero-Knowledge Threat Actor and…

https://www.securityweek.com/the-zero-knowledge-threat-actor-and-the-end-of-responsible-disclosure/