Russian cyber operations reveal sophisticated dual-threat approach: "Operation Undercut" spreads AI-enhanced disinformation through 500+ social media accounts, while APT28 demonstrates advanced network infiltration using "nearest neighbor" Wi-Fi attacks. These coordinated campaigns target ...
A new phishing-as-a-service toolkit called Rockstar 2FA is targeting Microsoft 365 users, capable of bypassing two-factor authentication through sophisticated attack methods. Priced at $200-350 on underground markets, this evolution of the DadSec phishing kit features advanced antibot prot...
Microsoft releases patches for four critical security vulnerabilities, including an actively exploited flaw (CVE-2024-49035) in partner.microsoft.com. Other fixes address issues in Copilot Studio, Azure PolicyWatch, and Dynamics 365 Sales, with CVSS scores ranging from 7.6 to 9.3. Most pat...
A sophisticated phishing-as-a-service platform, Rockstar 2FA, targets Microsoft 365 users by bypassing multi-factor authentication through adversary-in-the-middle attacks. For $200 per two-week access, it offers customizable phishing pages, automated tools, and support for multiple service...
Russian cybercrime leader Mikhail Pavlovich Matveev, known for operating major ransomware groups Hive, LockBit, and Babuk, has been arrested by Russian authorities. Operating under aliases Wazawaka, m1x, and Boriselcin, he orchestrated high-profile attacks on U.S. law enforcement and healt...
