Attackers Abuse Enterprise Collaboration Tools to Avoid Detection
Threat actors’ abuse of enterprise collaboration tools increased fourfold over the past twelve months, according to researchers at Palo Alto […]
Some Malicious PE Stats – SANS Internet Storm Center
During my last FOR610 session, a student asked me if I had some statistics in mind about the compilers used
Microsoft Entra ID Flaw, AI & Cybercrime
This weekly roundup highlights a broad range of cybersecurity and technology developments affecting cloud identity infrastructure, social media platforms, businesses,
EFF and Allies on Brazil’s Elections: Privacy Protections are Crucial to Electoral Integrity
EFF, Access Now, and Data Privacy Brasil are putting forward recommendations to strengthen robust privacy and data protection safeguards in
Prompt injection vs. scanner evasion
In June 2025, one email silently drained data out of a Microsoft 365 Copilot inbox. No click required. The exploit,
Industrial threat report for Q2 2026
All threats In Q2 2026, the percentage of ICS computers on which malicious objects were blocked continued to decrease, falling
PaperCut warns of hackers using printer management software flaw in attacks
The company behind a popular brand of printer management software warned customers of a new vulnerability currently being used by
This Week In Techdirt History: August 23rd – 29th
This Week in 2016 India Criminalizes Merely Visiting A Copyright Infringing ‘Blocked’ Site Anti-Piracy Operations Are Fabricating Links To Non-Existent
Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign
A two-month phishing campaign used scalable vector graphics (SVG) attachments disguised as voicemail files to smuggle obfuscated JavaScript past email
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
In this article Microsoft Threat Intelligence has observed a TerminalFix campaign, a variant of ClickFix, targeting organizations across multiple industries.