Supply-chain attacks are on the rise, but machine learning provides the edge that the security industry needs to keep up. Microsoft is seeing more and more malicious JavaScript packages (which are modules that developers use to build web and cloud applications) These are actually backdoor modules masquerading as legitimate pieces of code. Machine learning is becoming an important tool that can provide the edge, Microsoft’s John Lambert said. Microsoft itself was even compromised this way, when its Windows vulnerability was discovered, he added.
Source: https://threatpost.com/virus-bulletin-2018-microsofts-lambert-on-how-cloud-is-changing-security/137927/