In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
This week’s cybersecurity news highlights include Microsoft releasing patches for several vulnerabilities across its cloud services, a ransomware attack on Minnesota County resulting in a $128,539 ransom payment, a significant Dropbox account compromise linked to Lenovo, and various other security incidents and funding rounds. Notably, a Russian national was charged in the US for delivering malware to freelance users, and a major funding round was announced for Lasso Security, an Israeli AI security company.
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This week’s highlights include Microsoft releasing server-side patches for nine vulnerabilities across its cloud services, including Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio. These patches require no action from Microsoft’s customers.
Winona County in Minnesota reportedly paid a $128,539.57 ransom to the InterLock ransomware gang to restore services and protect personal information following a January 2026 ransomware attack. A second attack, claimed by the same group, occurred in April.
Dropbox has notified approximately 5,000 users that hackers compromised their accounts by abusing an issue with Lenovo’s email verification process. Attackers registered Lenovo IDs using the victim’s email addresses and then accessed their Dropbox accounts. Dropbox says it closed all unauthorized sessions and access.
A threat actor hacked Coder’s Cloudflare infrastructure and added unauthorized IP addresses that hosted malicious code. The code was served through Coder’s module registry website to a subset of users, for a short period of time. Users who downloaded the malicious code were infected with a credential stealer.
Russian national Searzhudin Tamirlanovich Aktulaev has been charged in the US for exploiting the online message platform of a freelance employment company in California to deliver malware to 80,000 freelance users between June 2016 and November 2017. Aktulaev was arrested in Cyprus last year.
Lasso Security, an Israeli AI security company, raised $30 million in a funding round led by ClearSky, with additional support from Entrée Capital, iAngels, Singtel Innov8, Mindset and Swish Data. The company has just announced LEAP, an AI guardrail that promises top-tier detection accuracy on CPUs.
Guardio, an AI security company focused on preventing AI-driven scams and identity theft, is valued at $1.1 billion following a new funding round of $40M.