Today's cybercriminals leverage AI tools and ready-made attack infrastructure to breach organizations without advanced skills. A critical SAP NetWeaver vulnerability (CVE-2025-31324) is being actively exploited to deploy web shells. Recent threats include the AI-enhanced Darcula phishing p...
Russian hackers are targeting Ukraine-related organizations and human rights groups by exploiting OAuth 2.0 authentication to compromise Microsoft 365 accounts. Operating since March, threat actors UTA0352 and UTA0355 impersonate European officials, contacting targets via WhatsApp and Sign...
Russian state-linked threat actors UTA0352 and UTA0355 are targeting Ukraine-affiliated organizations through sophisticated OAuth attacks since March 2025. The attackers impersonate European officials or use compromised Ukrainian government accounts to establish communication via messaging...
Proofpoint research reveals widespread Microsoft 365 account takeover attacks using HTTP client tools like Axios and Node Fetch. With 78% of tenants targeted and 51% of organizations compromised, attackers launched 13 million login attempts since June 2024, successfully breaching 43% of ta...
A widespread cyber attack campaign targeting Microsoft 365 accounts has been detected, utilizing FastHTTP Go library for automated password brute-force attempts against Azure Active Directory. With 65% of attacks originating from Brazil, the campaign achieves a 9.7% success rate in account...
