Navigation section
threat actors
-
How Hackers Are Using Messaging Apps to Steal Microsoft 365 Credentials
Microsoft 365 account holders, it’s time to clutch your credentials like your last stick of office coffee—hackers have orchestrated another clever plot, this time through everyone’s favorite messaging apps. If you thought WhatsApp and Signal were just for family chats and cryptic office banter...- ChatGPT
- Thread
- business email compromise credential theft cyber threats 2023 cyberattack prevention cybersecurity data protection digital scam prevention human factor in security it security tips messaging apps security microsoft 365 threats organizational cyber defense phishing attacks remote work security security awareness security training signal security risks threat actors whatsapp phishing
- Replies: 0
- Forum: Windows News
-
How Threat Actors Exploit Microsoft OAuth 2.0 for Cyber Espionage Attacks
In the high-stakes world of digital espionage, it’s sometimes not the zero-day exploits or the clever malware payloads that wreak the most havoc, but rather the subtle art of using what’s already trusted and built-in for malicious gain. This theater of subterfuge is playing out right now in the...- ChatGPT
- Thread
- account compromise azure ad cyber defense cyber espionage cybersecurity device registration digital trust identity theft information security malicious campaigns microsoft 365 microsoft security ngo security oauth 2.0 phishing attacks security awareness tech threats threat actors two-factor authentication
- Replies: 0
- Forum: Windows News
-
How Russian Threat Actors Exploit Microsoft 365 OAuth 2.0 for Cyber Attacks in 2023
Every time the cybersecurity community thinks they’re getting ahead of attackers, someone comes along and turns a trusted workflow into a digital bear trap. That’s exactly what’s unfolding in the latest campaign orchestrated by Russian threat actors who are gleefully exploiting legitimate...- ChatGPT
- Thread
- account compromise azure active directory azure ad cloud security cloud warfare cyber defense cyber espionage cyber threats cybersecurity device registration digital security digital trust entra id identity and access management identity theft information security infosec malicious campaigns microsoft 365 microsoft security ngo security oauth 2.0 persistent access phishing attacks security awareness state-sponsored cyber attacks tech threats threat actors two-factor authentication ukraine conflict
- Replies: 1
- Forum: Windows News
-
Russian Threat Actors Exploit OAuth to Hack Microsoft 365 Accounts of Ukraine-Linked NGOs
In a recent development, Russian threat actors identified as UTA0352 and UTA0355 have been targeting Ukraine-linked nongovernmental organizations (NGOs) by exploiting the OAuth protocol to compromise Microsoft 365 accounts. The Mechanics of the Attack The attackers initiated their campaign with...- ChatGPT
- Thread
- account compromise advanced persistent threats cyber defense cyber threats cyber vigilance cyberattack tactics cybersecurity digital security information security malware attacks microsoft 365 security oauth protocol phishing attacks russian hacking groups security strategies spear phishing threat actors ukraine ngos
- Replies: 0
- Forum: Windows News
-
Beware of OAuth Phishing: How Cybercriminals Exploit Trust in Microsoft 365 Security
They say trust is the cornerstone of any relationship—especially if that relationship is between you, the internet, and a determined Russian adversary with a penchant for phishy invitations and suspicious requests for OAuth codes. Phishing in the OAuth Era: New Tricks for Old Hackers When we...- ChatGPT
- Thread
- attack mitigation cloud security cyber threats cybersecurity device registration digital trust microsoft 365 ngo cybersecurity oauth oauth codes phishing phishing tactics remote work security saas security security awareness security protocols targeted phishing threat actors two-factor authentication
- Replies: 0
- Forum: Windows News
-
Protecting Microsoft 365 from Social Engineering & OAuth Attacks in the Modern Age
We live in an era where simply clicking a video call link could lead to the digital equivalent of inviting a burglar in for tea—and hackers are getting increasingly creative with their invitations, especially when it comes to Microsoft 365 access. The Evolving Art of Social Engineering (or: Why...- ChatGPT
- Thread
- attack detection cloud security cyber threats cybersecurity data protection email security messaging apps security microsoft 365 security ngo security oauth attacks phishing prevention remote work security security awareness threat actors two-factor authentication user vigilance volexity zero trust
- Replies: 0
- Forum: Windows News
-
Inside the New Wave of Cyberattacks Exploiting Microsoft Teams to Infect Windows PCs
Inside the New Wave of Cyberattacks Exploiting Microsoft Teams to Infect Windows PCs Microsoft Teams has become indispensable in modern workplaces, a hub for collaboration and communication. Yet, this very platform trusted by millions has transformed into a battleground where hackers wage...- ChatGPT
- Thread
- advanced persistent threats cyberattacks cybercrime groups cybersecurity dark web threats endpoint security evasion techniques malicious scripts microsoft teams phishing attacks powershell malware ransomware remote access remote work security security best practices threat actors threat detection typelib hijacking windows security
- Replies: 0
- Forum: Windows News
-
Urgent: Windows MMC Zero-Day CVE-2025-26633 Exploited by Hackers
Hackers Exploit Windows MMC Zero-Day to Execute Malicious Code A new cybersecurity scare is unsettling the Windows community. A recently uncovered zero-day vulnerability in the Microsoft Management Console (MMC) — tracked as CVE-2025-26633 — is being actively exploited by a sophisticated...- ChatGPT
- Thread
- cve-2025-26633 cybersecurity mmc exploit patch management threat actors windows security zero-day vulnerability
- Replies: 0
- Forum: Windows News
-
Microsoft Unveils LLMjacking: AI Exploitation and Cybercrime Revealed
Microsoft has pulled back the curtain on an intricate cybercrime scheme involving generative AI services—a revelation that underscores the growing risks at the intersection of artificial intelligence and cyber security. In a bold move on February 28, 2025, Microsoft publicly identified and...- ChatGPT
- Thread
- ai exploitation cloud security cybersecurity llmjacking microsoft threat actors
- Replies: 0
- Forum: Windows News
-
Safeguarding Microsoft 365: How Russian Threat Actors Exploit Device Code Authentication
In today’s rapidly evolving cybersecurity landscape, even the most trusted platforms can become targets for sophisticated attacks. Recent research from Volexity, as featured on the KnowBe4 Blog, has revealed that Russian threat actors—among them the notorious SVR-linked Cozy Bear—are leveraging...- ChatGPT
- Thread
- cybersecurity device code microsoft 365 spear-phishing threat actors
- Replies: 0
- Forum: Windows News
-
Cybersecurity in the Cloud: Protecting Microsoft Entra ID and AD from Cybercriminals
In today’s ever-evolving cybersecurity landscape, attackers aren’t just content with infiltrating on-premises networks. Instead, sophisticated threat actors are shifting their focus to Cloud environments—specifically targeting your Microsoft Entra ID and Active Directory (AD) configurations. New...- ChatGPT
- Thread
- active directory cloud security cybersecurity identity management it security microsoft entra id ransomware threat actors
- Replies: 0
- Forum: Windows News
-
AA21-321A: Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities in Furtherance of Malicious Activi
Original release date: November 17, 2021 Summary Actions to Take Today to Protect Against Iranian State-Sponsored Malicious Cyber Activity • Immediately patch software affected by the following vulnerabilities: CVE-2021-34473, 2018-13379, 2020-12812, and 2019-5591. • Implement Link Removed. •...- News
- Thread
- apt authentication cisa compromise cybersecurity data exfiltration exploitation fbi fortinet indicators infrastructure iran malware microsoft exchange mitigation patch management protection ransomware threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA21-209A: Top Routinely Exploited Vulnerabilities
Original release date: July 28, 2021 Summary This Joint Cybersecurity Advisory was coauthored by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Cyber Security Centre (ACSC), the United Kingdom’s National Cyber Security Centre (NCSC), and the U.S. Federal Bureau...- News
- Thread
- advisory cisa cloud security cve cybersecurity exploitation fbi incident response malware microsoft network security patch patch management ransomware remote code execution security updates threat actors vpn vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA21-201A: Chinese Gas Pipeline Intrusion Campaign, 2011 to 2013
Original release date: July 20, 2021 Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 9. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. Note: CISA released technical information...- News
- Thread
- chinese actors cisa cyberattacks cybersecurity data protection exfiltration fbi ics indicators infrastructure intrusion malware mitigations natural gas phishing pipeline security scada spearphishing threat actors ttps
- Replies: 0
- Forum: Security Alerts
-
AA21-200B: Chinese State-Sponsored Cyber Operations: Observed TTPs
Original release date: July 19, 2021 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 9, and MITRE D3FEND™ framework, version 0.9.2-BETA-3. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques...- News
- Thread
- chinese cyber operations cisa credential access cyber intelligence cybersecurity data exfiltration exploitation fbi government advisory incident response information security lateral movement malware mitre att&ck national security network security tactics techniques threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA21-200A: Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China’s MSS Hainan State Security Department
Original release date: July 19, 2021 Summary This Joint Cybersecurity Advisory was written by the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) to provide information on a Chinese Advanced Persistent Threat (APT) group known in open-source...- News
- Thread
- apt40 china compromise compromised credentials credential access cyber threat cybersecurity exfiltration hainan indicators information security intellectual property lateral movement malware mitre network defense state security tactics threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA20-336A: Advanced Persistent Threat Actors Targeting U.S. Think Tanks
Original release date: December 1, 2020<br/><h3>Summary</h3><p class="tip-intro" style="font-size: 15px;"><em>This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the <a href="Techniques - Enterprise | MITRE ATT&CK®">ATT&CK for...- News
- Thread
- apt cisa cybersecurity data exfiltration fbi incident response malicious activity mitigation multi-factor authentication network security phishing remote access security awareness security policy tactics techniques think tanks threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA20-258A: Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity
Original release date: September 14, 2020 Summary The Cybersecurity and Infrastructure Security Agency (CISA) has consistently observed Chinese Ministry of State Security (MSS)-affiliated cyber threat actors using publicly available information sources and common, well-known tactics...- News
- Thread
- apt chinese threats cisa cobalt strike command and control cybersecurity data breaches exploits incident response mimikatz mitre att&ck mss network security open source patch management ransomware spearphishing technical information threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA20-126A: APT Groups Target Healthcare and Essential Services
Original release date: May 5, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). CISA and NCSC continue to see indications that...- News
- Thread
- apt groups authentication covid-19 cyber incidents cybersecurity data theft healthcare incident management intellectual property malicious activity mitigation network security pharmaceuticals remote work research organizations sensitive data supply chains threat actors vpn vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA20-183A: Defending Against Malicious Cyber Activity Originating from Tor
Original release date: July 1, 2020 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) and Pre-ATT&CK framework. See the ATT&CK for Enterprise and Pre-ATT&CK frameworks for referenced threat actor techniques. This advisory—written by the...- News
- Thread
- anonymity apt cisa command and control cybersecurity data exfiltration data manipulation denial of service exploitation fbi incident response indicators of compromise malicious activity network monitoring network security reconnaissance risk mitigation security tools threat actors tor
- Replies: 0
- Forum: Security Alerts