The vulnerability of Microsoft Exchange Server servers, related to insufficient validation of input data, allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft Exchange Server servers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Business Chat function in Microsoft 365 Copilot allows attackers to carry out spear-phishing attacks.

The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

The vulnerability of the Business Chat function in Microsoft 365 Copilot allows attackers to carry out spear-phishing attacks.

The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware

A China-aligned threat actor codenamed UTA0388 has been attributed to a series of spear-phishing campaigns targeting North America, Asia, and Europe that are designed to deliver a Go-based implant known as GOVERSHELL. "The initially observed campaigns were tailored to the targets, and the message...

From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware

A China-aligned threat actor codenamed UTA0388 has been attributed to a series of spear-phishing campaigns targeting North America, Asia, and Europe that are designed to deliver a Go-based implant known as GOVERSHELL. "The initially observed campaigns were tailored to the targets, and the message...

The Evolution of Russian Physical-Cyber Espionage

The Evolution of Russian Physical-Cyber Espionage By Ryan Slaney · October 6, 2025 Russian state-sponsored cyber operations, primarily those conducted by hackers belonging to its Main Intelligence Directorate GRU, also known as APT28, have long combined digital intrusions with physical tradecraft...

Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware

The threat actor known as Confucius has been attributed to a new phishing campaign that has targeted Pakistan with malware families like WooperStealer and Anondoor. "Over the past decade, Confucius has repeatedly targeted government agencies, military organizations, defense contractors, and...

Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware

The threat actor known as Confucius has been attributed to a new phishing campaign that has targeted Pakistan with malware families like WooperStealer and Anondoor. "Over the past decade, Confucius has repeatedly targeted government agencies, military organizations, defense contractors, and...

Malicious ZIP Files Use Windows Shortcuts to Drop Malware

Cybersecurity firm Blackpoint Cyber reveals a new spear phishing campaign targeting executives. Learn how attackers use fraudulent document ZIPs containing malicious shortcut files, leveraging 'living off the land' tactics, and a unique Anti-Virus check to deliver a custom payload...

The vulnerability of Microsoft Edge browser, related to the absence of warnings for dangerous actions, allows attackers to carry out spear-phishing attacks.

The vulnerability of Microsoft Edge is related to the absence of warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to carry out spear-phishing attacks...

The vulnerability of the WebAuthn component in Mozilla Firefox’s browser and Thunderbird’s email client allows attackers to perform spear-phishing attacks.

The vulnerability of the WebAuthn component in Mozilla Firefox and the Thunderbird email client is related to deficiencies in the authentication process due to incorrect display of the domain name in the address bar. Exploiting this vulnerability can allow attackers to perform spear-phishing...

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns targeting the U.S. government, think tanks, and academic organizations utilizing U.S.-China economic-themed lures. "In this activity, the group masqueraded as the current Chair of the Select Committee on...

The vulnerability of Microsoft Edge browser for Android, related to the false representation of critical information on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser for Android is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

The vulnerability of Microsoft Edge browser for Android, related to the false representation of critical information on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser for Android is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

Gucci, Balenciaga and Alexander McQueen Breach Linked to ShinyHunters

ShinyHunters reportedly hacked Kering, exposing Gucci, Balenciaga and Alexander McQueen customer data, raising risks of scams and spear…...

The vulnerability of the browser toolbars in Google Chrome and Microsoft Edge allows attackers to perform spoofing attacks.

The vulnerability of the browser toolbars in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge browsers allows attackers to carry out spear-phishing attacks.

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs

The China-aligned threat actor known as Mustang Panda has been observed using an updated version of a backdoor called TONESHELL and a previously undocumented USB worm called SnakeDisk. "The worm only executes on devices with Thailand-based IP addresses and drops the Yokai backdoor," IBM X-Force...

The vulnerability of the extended Microsoft OfficePlus package, related to information disclosure, allows attackers to perform spear-phishing attacks.

The vulnerability of the extended Microsoft OfficePlus package is related to the disclosure of information. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

A Decade-Long Landscape of Advanced Persistent Threats: Longitudinal Analysis and Global Trends

An advanced persistent threat APT refers to a covert, long-term cyberattack, typically conducted by state-sponsored actors, targeting critical sectors and often remaining undetected for long periods. In response, collective intelligence from around the globe collaborates to identify and trace...