Security researchers have revealed how mule operators across the Middle East, Turkeyand Africa (META) region have evolved from basic internet-masking tricks to sophisticated multi-layer fraud networks that now blend digital deception with physical logistics. According to a new report by Group-IB, two years ago, mule actors relied on simple VPN and proxy tools to mask … Ler mais
Hackers are using a novel technique that combines legitimateoffice.com links with Active Directory Federation Services (ADFS) to redirect users to a phishing page that steals Microsoft 365 logins. The method lets attackers bypass traditional URL-based detection and the multi-factor authentication process by leveraging a trusted domain on Microsoft’s infrastructure for the initial redirect. Legitimacy of … Ler mais
A gangue Scouly Wolf Advanced Persent Ameaça (APT) mais uma vez direcionou uma empresa de engenharia russa em um sofisticado ataque direcionado que foi descoberto pelos analistas do Doctor Web. Isso mostra que o grupo está determinado a obter segredos corporativos. Esse incidente, ocorrendo em meados de 2025, ecoa um ataque semelhante em 2023, onde … Ler mais
Microsoft is investigating an ongoing issue preventing users across North America from accessing Office.com and the company’s Copilot AI-powered assistant. According to user reports on DownDetector, this incident began impacting Microsoft’s services almost two hours ago and is currently triggering server connection problems and causing issues when trying to log into accounts. “Impact is specific … Ler mais
Security leaders today are rethinking email security, not because traditional methods have failed outright, but because the threat landscape and business needs have evolved beyond what legacy approaches can handle. A surprising but apt analogy keeps surfacing: email security is stuck where antivirus (AV) was a decade ago, and it’s time it evolved like AV … Ler mais
Security researchers at Barracuda Networks have discovered two novel QR code phishing (quishing) techniques involving splitting malicious QR codes into two parts or embedding them into legitimate ones. They detailed their findings in a new report, Threat Spotlight: Split and nested QR codes fuel new generation of ‘Quishing’ attacks, published on August 20. QR Code … Ler mais
O Centro de Coordenação da Equipe de Resposta a Emergências de Emergência (CERT/CC) emitiu um aviso crítico de consultoria de segurança de vulnerabilidades graves no software de contabilidade municipal dos Serviços de Software que poderia permitir Acesso não autorizado a dados financeiros sensíveis do governo e informações pessoalmente identificáveis. As vulnerabilidades, rastreadas como CVE-2025-9037 e … Ler mais
Warlock ransomware operators have extensively targeted the Microsoft SharePoint ToolShell vulnerability to hit victims globally, according to Trend Micro researchers. Warlock affiliates have used the widely reported flaw to compromise unpatched organizations at speed and depth via a sequence of sophisticated post-exploitation techniques. “By exploiting SharePoint’s authentication and deserialization flaws, attackers were able to rapidly … Ler mais
Recently released Windows 11 24H2 updates are reportedly causing data corruption and failure issues for some SSD and HDD models on up-to-date systems. This issue was first reported on Friday by a Japanese PC building enthusiast who saw drives with Phison NAND controllers disappearing from the OS during heavy write operations (like writing large files … Ler mais
A US non-profit has urged business owners and influencers not to fall for a new scam in which threat actors try to gain remote access to their PC and hijack their online accounts. The Better Business Bureau (BBB) warned that the “podcast imposter” scam usually begins with an email from the management team of a … Ler mais
