Microsoft security day: autonomous ransomware on the record, bounties halved under AI slop
From the AI digest for Oct 2, 2026
Three Microsoft threads in one window. (1) The Microsoft Digital Defense Report 2026 warns AI has handed cyberattackers a near-term advantage, including what the report describes as the first fully autonomous ransomware attacks on real organizations (search feed, ~6:24 PM ET Oct 1). (2) The bounty economics are cracking: WSJ — Microsoft cut hackers' payments in half as generative AI floods vulnerability programs with low-effort reports; curl's Daniel Stenberg ended his cash bounties entirely for the same reason. (3) SpecterOps × OpenAI launched an "Adversary Intelligence LLM Tradecraft" course.
What's genuinely new: the offense record moves from regulator-noted breaches (AEPD) to vendor-documented autonomous extortion; and the defense side now shows market damage from the defensive review layer itself — AI slop reports have repriced vulnerability disclosure. That is a novel mechanism for the thread: models raising the cost of having a bounty program.
Watch: corroboration of the autonomous-ransomware cases by a second outlet (MDDR is vendor-grade), and whether other bounty programs (Google, Meta) follow Microsoft's repricing.