Microsoft's March 11 Patch Tuesday rollout, a cornerstone event for Windows security, included a critical fix for an NTLM hash-leaking vulnerability identified as CVE-2025-24054. Initially, Microsoft had rated this vulnerability as "less likely" to be exploited, but swift real-world attacks have...
In a rapidly evolving cybersecurity landscape, a newly discovered botnet comprising over 130,000 compromised devices has set its sights on Microsoft 365 accounts. This stealthy campaign, uncovered by SecurityScorecard’s STRIKE Threat Intelligence team, leverages sophisticated password spraying...
In a trend that should raise alarm bells in the cybersecurity community, it has been reported that hackers allegedly linked to the Chinese government are utilizing a massive botnet to execute covert password spraying attacks specifically aimed at Microsoft’s Azure cloud services. Dubbed...