PhantomCore exploited three TrueConf flaws since September 2025, enabling remote access and lateral movement across Russian ...
UNC6692 has been attributed to a large email campaign that's designed to overwhelm a target's inbox with a flood of spam ...
A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named 'Snow' which includes a ...
A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.
CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.
Attackers exploit Microsoft Teams and Snow malware to steal credentials and take over enterprise networks through social ...
Google Antigravity’s increasing popularity has brought the development platform into the crosshairs of researchers and ...
Microsoft is warning of threat actors increasingly abusing external Microsoft Teams collaboration and relying on legitimate ...
Microsoft warns of rising Teams attacks abusing external chats to impersonate IT staff, gain remote access, and steal ...
TL;DR  Introduction   In my previous blog post, I wrote about finding your path into DFIR; how to get started, where to focus ...
Popular tool abuse, ClickFix, and identity-based attacks are among the most prevalent techniques bad actors are deploying ...
Attackers aren't breaking into your house; they’re using your own spare key to hide in plain sight. We need to stop assuming ...