Microsoft security day: autonomous ransomware on the record, bounties halved under AI slop
From the AI digest for 2026-10-02
Three Microsoft threads in one window. (1) The Microsoft Digital Defense Report 2026 warns AI has handed cyberattackers a near-term advantage, including what the report describes as the first fully autonomous ransomware attacks on real organizations (search feed, ~6:24 PM ET Oct 1). (2) The bounty economics are cracking: WSJ — Microsoft cut hackers' payments in half as generative AI floods vulnerability programs with low-effort reports; curl's Daniel Stenberg ended his cash bounties entirely for the same reason. (3) SpecterOps × OpenAI launched an "Adversary Intelligence LLM Tradecraft" course.
What's genuinely new: the offense record moves from regulator-noted breaches (AEPD) to vendor-documented autonomous extortion; and the defense side now shows market damage from the defensive review layer itself — AI slop reports have repriced vulnerability disclosure. That is a novel mechanism for the thread: models raising the cost of having a bounty program.
Watch: corroboration of the autonomous-ransomware cases by a second outlet (MDDR is vendor-grade), and whether other bounty programs (Google, Meta) follow Microsoft's repricing.