Q3 2026 Email Threat Landscape Shows Rise in Phishing Attacks
Microsoft Threat Intelligence reports a notable increase in phishing emails during Q3 2026 with new techniques such as CAPTCHA-gated phishing and business domain spoofing.
Tag
#Security Operations
38 results in the archive.
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution
Adobe addressed eight critical vulnerabilities in Campaign Classic that could enable code injection and privilege escalation, posing significant enterprise security risks.
AI-Generated Fake Login Pages Heighten Risk of Account Takeovers
Generative AI enables attackers to create more convincing fake login pages that steal passwords and MFA codes, increasing phishing attack sophistication.
Gheist Campaign Steals GitHub Secrets via Stolen Tokens and Actions Logs
The Gheist group exploits stolen GitHub tokens to extract private repository secrets from GitHub Actions logs, impacting private and Enterprise GitHub environments.
Microsoft 365 Token-Replay Attacks Hit 79 Organizations
Researchers uncovered a token-replay campaign exploiting adversary-in-the-middle relays to hijack Microsoft 365 session tokens across 79 organizations.
Microsoft Teams to Get AI-Powered Phishing Detection
Microsoft plans to deploy AI-powered, context-aware phishing detection in Teams messages starting November 2026, enhancing protection against phishing attacks in enterprise environments.
AI Agents at Risk: Managing Who Commands Your AI Access
AI agents can be exploited via malicious inputs to perform unauthorized actions, prompting Gen Digital to launch Agent Trust Hub for improved skill verification and runtime controls.
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks
INTERPOL coordinated the arrest of 1,462 suspects and disrupted over 10,900 cybercrime networks in a global operation targeting organized cybercrime.
Rank Math PRO WordPress Plugin Compromised in Supply-Chain Attack
The Rank Math PRO WordPress plugin was compromised via its official vendor site, distributing malware with hidden backdoors that affect numerous websites.
How to Run a Deepfake Readiness Drill Before a Cloned Voice Hits Your Team
Structured readiness drills simulate cloned voice deepfake attacks to help security teams detect verification weaknesses in fraud and access requests.
Microsoft Patch Tuesday October 2026: Key Vulnerabilities & Snort Rules
October 2026 Patch Tuesday unveils multiple vulnerabilities in Microsoft products along with updated Snort rules for enhanced detection.
Max severity SonicWall SMA1000 flaw now exploited in attacks
A critical vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) patched recently is now being actively exploited in the wild against unpatched devices.
Hackers Hijack Google Domains via ccTLD Registry Breaches
Hackers breached third-party operators managing ccTLD registries for Ghana, American Samoa, and Sierra Leone, compromising Google domains through unauthorized HTTPS certificates and DNS record modifications.
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Weeks
Attackers accessed tax data of hundreds of thousands in France using stolen staff passwords and remained undetected for seven weeks due to weak detection.
Iranian Hackers Deploy Telegram-Controlled Malware Against Dissidents
US, UK, and Dutch agencies report Iran's intelligence uses Windows malware controlled via Telegram to spy on dissidents and journalists globally, targeting sensitive communications and recordings.
JSCeal Malware Can Bypass Google Auth Using Stolen Session Cookies
JSCeal malware is a sophisticated JavaScript-based threat that bypasses Google authentication by stealing session cookies and uses advanced obfuscation to evade detection.
Securing Edge AI in Customer-Owned Environments
Microsoft outlines strategies to secure edge AI assets in customer-owned environments, addressing challenges in verifying trusted systems before exposing sensitive data and AI models.
IDScan sued over breach exposing 153 million driver’s licenses
IDScan faces multiple lawsuits after hackers allegedly breached its identity verification service and sold data on over 153 million driver’s licenses, highlighting critical risks in personal data security.
CISA Red Team Tests Expose Critical SOC and Cloud Security Gaps
CISA's red team assessments identified significant detection and response weaknesses in IT, cloud, and OT environments, revealing misconfigured Active Directory and excessive cloud permissions.
Critical Vulnerabilities Found in Ebyte NE2-D11 Firmware
Multiple critical vulnerabilities in Ebyte NE2-D11 devices allow unauthorized administrative access, data exposure, and operational disruption, affecting critical infrastructure controls.
Hackers Breached 270+ Zimbra Servers via Critical RCE Vulnerability
Over 270 Zimbra Collaboration Suite servers have been breached through exploitation of a critical remote code execution vulnerability, exposing organizations to significant security risks.
Thousands of Active Leaked AWS Keys Expose Corporate Accounts
Over 9,300 AWS access keys leaked between 2022 and 2026 remain active, exposing corporate accounts to unauthorized access risks.
Wazuh Integrates AI to Enhance SOC Workflows
Wazuh integrates AI capabilities to automate repetitive SOC tasks and identify hidden patterns in security data, enhancing analyst efficiency and decision-making.
AI-Assisted Exploit Enables Unauthenticated RCE on SharePoint Servers
A critical SharePoint vulnerability (CVE-2026-55040) enables unauthenticated remote code execution, facilitated by AI, affecting several SharePoint Server versions.
AI Delegation Risks: When Broad Access Leads to Security Exposure
AI agents with vague or broad access permissions can exceed their intended scope, posing significant security risks for enterprises by potentially exposing sensitive data or systems.
LexisNexis Shuts Down Services After Suspicious Server Activity
LexisNexis took down several services after detecting unusual activity on servers managed by a third-party vendor, raising concerns about potential data breaches.
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The Greatness phishing-as-a-service toolkit now uses device code phishing to exploit OAuth 2.0 Device Authorization Grant, bypassing MFA and hijacking accounts.
Amgen Cloud Data Breach Exposes Patient and Corporate Information
Amgen reported a cloud data breach involving unauthorized access to patient health data and proprietary corporate information via third-party cloud systems.
NVIDIA Forms 37-Member Open Secure AI Alliance, Open-Sources NOOA Framework
NVIDIA and 36 organizations have established the Open Secure AI Alliance to develop collaborative open technologies aimed at securing AI and software environments.
vBulletin fixes critical pre-auth RCE flaw with public exploit
A critical pre-authentication remote code execution vulnerability in vBulletin forum software has been patched following the public release of an exploit, enabling unauthenticated attackers to execute arbitrary PHP code.
Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts
Attackers manipulate DNS settings on hotel and conference center Wi-Fi to redirect users to fraudulent Microsoft 365 login pages, targeting credential theft from business travelers.
New Windows LegacyHive zero-day exploit grants admin privileges
A zero-day vulnerability named LegacyHive enables privilege escalation on fully updated Windows systems, allowing attackers to gain admin-level access.
Abbott Investigates Two Cyber Incidents Amid Extortion Claims
Abbott Laboratories is investigating unauthorized access incidents affecting Exact Sciences legacy systems and its LabCentral portal, with allegations of stolen company data linked to extortion.
New ClickLock macOS Malware Forces Users to Reveal Login Password
ClickLock is a new macOS information-stealing malware that tricks users into revealing their system login password by terminating visible processes.
Two Scattered Spider Hackers Sentenced for £29M TfL Hack
Two hackers were sentenced for their 2024 attack on Transport for London, which disrupted 148 systems and forced a password reset for 27,000 employees, causing significant operational and financial impact.
Zoom warns of critical account takeover vulnerability
Zoom has disclosed a critical vulnerability in its Windows desktop client and SDK that enables unauthenticated attackers to hijack user accounts, posing a significant security risk.
Spanish Police Dismantle €140M Cyber Fraud Ring, Arrest Four
Spanish Police arrested four individuals and dismantled a cybercrime network responsible for €140 million in losses through investment fraud and business email compromise attacks.
Google and Microsoft Remove ModHeader Extension Over Hidden Collector
Google and Microsoft removed the ModHeader browser extension from their stores due to a dormant hidden browsing-history collector found in the official version, with no evidence of active data transmission.