cyberattack techniques

A pivotal security development has emerged from the world of enterprise identity management: a critical flaw has been identified in delegated Managed Service Accounts (dMSA) within Windows Server 2025. This vulnerability, discovered and named the “Golden dMSA” attack by Semperis security...

NTLM relay attacks, once thought to be a relic of the past, have re-emerged as a significant threat in modern Active Directory environments. Despite years of research and incremental security improvements, most enterprise domains remain susceptible to these attacks, creating wide-reaching risks...

America’s decisive air campaign against Iran’s nuclear infrastructure may have changed the global security landscape overnight, but the destruction of spinning centrifuges and command bunkers does not signify the end of Iranian threats on the world stage. Far from it. The new battlefield is not...

Password spraying attacks have become one of the most persistent and damaging techniques in the arsenal of modern cybercriminals, as demonstrated by a newly disclosed incident in which over 80,000 Microsoft Entra ID accounts were targeted using legitimate penetration testing tools. According to...

A new chapter in the ongoing battle for cloud security unfolded recently, as researchers disclosed a brazen and remarkably methodical campaign that has compromised over 80,000 user accounts spanning hundreds of organizations. The abuse of penetration testing tools—originally intended as shields...

A chilling new wave of cyber threats has emerged at the intersection of artificial intelligence and enterprise productivity suites, exposing deep-rooted vulnerabilities in widely adopted platforms such as Microsoft 365 Copilot. Among the most unsettling of these discoveries is a “zero-click” AI...

In June 2025, a critical "zero-click" vulnerability, designated as CVE-2025-32711, was identified in Microsoft 365 Copilot, an AI-powered assistant integrated into Microsoft's suite of productivity tools. This flaw, dubbed "EchoLeak," had a CVSS score of 9.3, indicating its severity. It allowed...

Microsoft's Copilot, an AI-driven assistant integrated into the Microsoft 365 suite, has recently been at the center of significant security concerns. These issues not only highlight vulnerabilities within Copilot itself but also underscore broader risks associated with the integration of AI...

The ongoing race between cybersecurity defenders and threat actors is defined as much by shifting technical frontiers as by ingenuity and adaptation. Nowhere is this dynamic more vividly demonstrated than in the persistent evolution of malware evasion techniques and the operating system updates...

The cybersecurity landscape continues to evolve at an unprecedented pace, with malware creators and defenders locked in a relentless contest of innovation. Nowhere is this battle more apparent than in the dynamic interplay between cutting-edge malware packaging tools and the latest operating...

The emergence of Void Blizzard—a newly identified, Russian-affiliated threat actor—has sent ripples of concern through cybersecurity communities, government agencies, and critical infrastructure operators worldwide. According to detailed findings published by Microsoft Threat Intelligence, Void...