Daily · 2026-05-17
⚠️ Azure Silent Patch, 🎯 Lamashtu Parle Agro, 🏥 Qilin Medical Center, 🩺 DragonForce Health, 💻 Microsoft MDASH
Microsoft silently patched a critical Azure Backup for AKS privilege escalation and blocked CVE issuance. Ransomware activity remains elevated with Lamashtu claiming Indian beverage giant Parle Agro, while TheGentlemen, Qilin, and DragonForce continue healthcare and enterprise targeting. Microsoft unveiled MDASH, a multi-model AI security system that found 16 Windows vulnerabilities.
Microsoft's silent patch of a critical Azure Backup for AKS privilege escalation is the day's defining story, less for the flaw than for the disclosure process around it. A low-privileged Backup Contributor role could reach cluster-admin through Trusted Access auto-configuration, CERT/CC independently validated the report, and Microsoft still rejected it, patched quietly, and blocked a CVE. When a vendor controls both the verdict and the identifier, defenders lose the ability to track and prioritize fixes. Microsoft silently patches critical Azure Backup for AKS privilege escalation, blocks CVE issuance
The day's ransomware reporting is a healthcare cluster. Qilin added an Argentine medical center, DragonForce is releasing US patient data in chunks, and TheGentlemen keeps expanding through its edge-device initial-access model with a US insurer and a Dutch language institute. Downtime sensitivity and the direct value of patient records keep healthcare the most targeted vertical. TheGentlemen ransomware continues rapid victim expansion: US insurer and Dutch language institute claimed
On the defense side, Microsoft's MDASH harness orchestrated more than 100 AI agents to find 16 Windows vulnerabilities, including four critical RCEs, all patched in the May update. Agentic security tooling is moving from research to production, which changes expectations for what internal testing should catch before disclosure. Lamashtu's claim on Parle Agro marks the newer group's first major Indian corporate victim, a reminder that no geography is off-limits.
Watchlist: Azure Backup for AKS role assignments, on-premises Exchange exposure, and healthcare data-leak monitoring.