Earlier reports mentioning Microsoft
Cybersecurity researchers have detailed an ongoing TeamFiltration campaign, identified by the codename UNK_CondorFiltration, which has successfully compromised more than 5,700 accounts across 28 distinct Microsoft 365 tenants. Proofpoint, a cybersecurity firm, reported that this campaign has predominantly targeted retail…
A Chinese threat actor, identified as UTA0565, has been observed exploiting a newly disclosed exploit chain involving Google Chrome and Microsoft Windows as zero-days. These attacks, detected between September 3 and September 4, 2026, utilized a sophisticated method of chaining…
Microsoft announced on Tuesday the successful takedown of the EvilTokens device code phishing service, a sophisticated operation that utilized artificial intelligence (AI) at every stage of its attack chain. This action, authorized by the U.S. District Court for the Eastern…
A zero-day proof-of-concept (PoC) tool named BigDiskBuster was published on GitHub on September 19, capable of preventing Microsoft Defender from installing platform and signature updates. This exploit achieves its objective by consuming all available disk space on a targeted system…
A critical vulnerability in Microsoft SharePoint Server, initially categorized by Microsoft as a spoofing flaw with a Common Vulnerability Scoring System (CVSS) score of 6.5, has been revealed to enable authenticated remote code execution (RCE).
Security researchers from LastPass and Delphos Labs have uncovered a sophisticated attack campaign utilizing a fake installer for the LastPass Authenticator application. This malicious software, discovered on GitHub, employs a Windows kernel driver that is digitally signed by Microsoft…