A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.

UNC6692 has been attributed to a large email campaign that's designed to overwhelm a target's inbox with a flood of spam ...

Not nearly as polite as the name suggests, the ransomware gang has impressed researchers with its speed in scaling up ...

TL;DR  Introduction   In my previous blog post, I wrote about finding your path into DFIR; how to get started, where to focus ...

The cross-platform shell that nobody expected to take seriously.

Microsoft warns of rising Teams attacks abusing external chats to impersonate IT staff, gain remote access, and steal ...

Microsoft is warning of threat actors increasingly abusing external Microsoft Teams collaboration and relying on legitimate ...

Attackers aren't breaking into your house; they’re using your own spare key to hide in plain sight. We need to stop assuming ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

PowMix targets Czech workforce since Dec 2025 using jittered C2 and ZIP phishing, enabling stealthy remote access and ...

Microsoft has released Windows 11 KB5083769 and KB5082052 cumulative updates for versions 25H2/24H2 and 23H2 to fix security ...

PowerShell's scripting language and ability to interact directly with Windows system elements give it a superpower that ...