CYBERSECURITY AND THREAT INTELLIGENCE
Here Come the AI-Generated BEC Scams
Messages delivered through legitimate third-party email infrastructure had C-suite sender display names, custom signatures, and direct approval notes.
UNITED STATESMICROSOFT
CYBERSECURITY AND THREAT INTELLIGENCE
Unlike standard commodity malware that aims for quick credential theft, this campaign features a manual, hands-on-keyboard scheme designed to escalate rapidly from a single compromised workstation to broad, network-wide access.
CYBERSECURITY AND THREAT INTELLIGENCE
MicroTik Routers Under Attack in New Campaign
Labeled "MikroTrick" by researchers at CERT Polska who discovered and disclosed six vulnerabilities in the software, the campaign targets devices with SSH services reachable from the public internet
DIGITAL FORENSICS AND INCIDENT RESPONSE
Critical Artifactory Bug Under Attack
CVE-2026-82329 is a simple authentication bypass that can allow an attacker to get admin privileges quite easily
CYBERSECURITY AND THREAT INTELLIGENCE
Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520
The chain leverages two distinct vulnerabilities—an authentication bypass and an unsafe .NET type instantiation flaw—to provide full server control without valid credentials.
