CSuite Phishing Takes Microsoft 365 Accounts and the PC Too
CSuite Phishing Takes Microsoft 365 Accounts and the PC Too

A phishing operation tracked as CSuite sends employees a document to review. Then it takes one of...

Pentagon Breach Exposed 3 Million People for Nine Months
Pentagon Breach Exposed 3 Million People for Nine Months

A flaw in a Pentagon file-sharing system let unauthorized users read personnel records for roughly...

Custom GPT ClickFix Attacks Hide Behind Real ChatGPT
Custom GPT ClickFix Attacks Hide Behind Real ChatGPT

Attackers employed custom GPTs through the legitimate ChatGPT website to lure visitors into a...

Lunex Stealer Uses an AMD Driver to Leave EDR Running Blind
Lunex Stealer Uses an AMD Driver to Leave EDR Running Blind

Attackers altered legitimate Ukrainian business websites so that visitors saw a fake Cloudflare...

A Fake Movie File Installs MovieReaper on Windows PCs
A Fake Movie File Installs MovieReaper on Windows PCs

A publicly available archive containing torrent files was altered to make magnet links provide some...

AI Agents Stole 600,000 Cards for $25 a Company
AI Agents Stole 600,000 Cards for $25 a Company

The attacker compromised over 600,000 unused credit card records from two organizations and...

DarkMe RAT Swapped Its Zero-Days For A Fake PNG
DarkMe RAT Swapped Its Zero-Days For A Fake PNG

In early 2024, DarkMe reached its victims through a zero-day in Microsoft Defender SmartScreen....

SharePoint’s Spoofing Bug Is Really Code Execution
SharePoint’s Spoofing Bug Is Really Code Execution

Two CVE listings cover CVE-2026-65660. According to the security advisory from Microsoft, the...

Gyazo: Command Execution Exposed 490M Records
Gyazo: Command Execution Exposed 490M Records

A hacker managed to exploit the vulnerability within Gyazo’s picture uploading server on...