Microsoft admits GitHub hosted malware that infected almost a million devices

Microsoft reported a malvertising campaign that used multiple redirect layers and a GitHub-hosted dropper to install multi-stage payloads—first-stage reconnaissance, then varied third-stage modules performing command-and-control, data exfiltration and credential theft—potentially exposing nearly one million devices; the roundup also calls out several actively exploited high-severity CVEs, Cisco advisories, privacy-harming phone-cleaner apps, AI-based phishing impersonations, and legislative and enforcement developments addressing scams.