Microsoft patches record 974 CVEs; AI agents steal thousands of credentials; F5 devices breached

Microsoft released its largest Patch Tuesday addressing 974 vulnerabilities—including two zero-days being actively exploited—while autonomous AI-driven agents harvested thousands of credentials in under six hours; F5 BIG-IP APM devices are being breached to deploy a Linux rootkit that injects fileless web shells; CrowdStrike-tracked 'Slim Spider' targets Brazilian crypto custody infrastructure; and the DoppelCart fraud network operates ~119,000 fake shops. The briefing assigns HIGH threat level overall and recommends urgent patching for the zero-days, enabling MFA, auditing and isolating compromised F5 appliances, rotating crypto credentials, and blocking/following up on fraudulent domains.