Q3 2026 Email Threat Landscape Shows Rise in Phishing Attacks
Microsoft Threat Intelligence reports a notable increase in phishing emails during Q3 2026 with new techniques such as CAPTCHA-gated phishing and business domain spoofing.
Tag
#Threat Intelligence
15 results in the archive.
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks
INTERPOL coordinated the arrest of 1,462 suspects and disrupted over 10,900 cybercrime networks in a global operation targeting organized cybercrime.
Rank Math PRO WordPress Plugin Compromised in Supply-Chain Attack
The Rank Math PRO WordPress plugin was compromised via its official vendor site, distributing malware with hidden backdoors that affect numerous websites.
CISA Adds New Fortinet FortiMail Vulnerability to Exploited Catalog
CISA has added CVE-2026-104286, a path traversal vulnerability in Fortinet FortiMail, to its Known Exploited Vulnerabilities Catalog due to active exploitation risk.
NeedyMantis: Modular Malware Threat in Targeted Intrusions
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework designed for persistent access in targeted operations.
North Korean WaterPlum Hackers Infiltrate 30,000 Devices Worldwide
The North Korean group WaterPlum compromised over 30,000 devices worldwide, stealing more than $10.7 million in cryptocurrency between December 2025 and July 2026.
Iranian Hackers Deploy Telegram-Controlled Malware Against Dissidents
US, UK, and Dutch agencies report Iran's intelligence uses Windows malware controlled via Telegram to spy on dissidents and journalists globally, targeting sensitive communications and recordings.
CISA Adds Cisco Secure Email Gateway SQLi to Known Exploited Vulnerabilities
CISA has listed CVE-2026-76461, a SQL injection flaw in Cisco Secure Email Gateway, as actively exploited and requires urgent remediation by federal agencies.
Securing AI Infrastructure: Protecting Gateways and Control Points
Microsoft Threat Intelligence reports attacks on AI workloads targeting gateways such as LiteLLM, focusing on credential harvesting, persistence, and cryptomining risks in AI infrastructure.
Critical RCE Flaw in Windows IKE Extension Actively Exploited
CISA warns of active exploitation of a critical remote code execution vulnerability in the Windows Internet Key Exchange Service Extensions, enabling attacker code execution without user interaction.
SilkParasite Espionage Targets Central Asian Governments with Five New RATs
SilkParasite, a newly uncovered cyber espionage campaign, targets Central Asian government bodies using seven remote access tools, five of which are previously undocumented, highlighting evolving advanced threats in the region.
Critical SAP Commerce Cloud RCE Flaw Targeted in Active Attacks
A maximum-severity remote code execution vulnerability in SAP Commerce Cloud patched just three days ago is now actively exploited, posing a critical security risk.
How Threat Actors Are Weaponizing Cloud-Based AI: A Data-Driven Review
Talos analyzed prompt logs from various AI applications used by threat actors to understand their evolving tactics, revealing increased sophistication in leveraging cloud-based AI for malicious activities.
ShinyHunters abuses OAuth in SaaS apps: Microsoft issues alert
Microsoft Threat Intelligence uncovered ShinyHunters abusing OAuth in SaaS applications through vishing, supply chain attacks, and guest access misconfigurations, exposing new SaaS security risks.
Progress Warns ShareFile Customers to Shutdown Storage Zone Controllers
Progress Software advises ShareFile customers to shut down Windows servers running Storage Zone Controllers due to a credible security threat, disabling account access as a precaution.