Category Archives: Threat Alerts
Operation BlueDash Phishing Campaign Deploys Dual RMM Tools
Discover how Operation BlueDash uses fake Microsoft Teams updates and social engineering to deploy dual RMM tools and compromise enterprise endpoints. Continue reading
Microsoft 365 Phishing Campaign Hijacks Hotel Wi-Fi DNS
A sophisticated Microsoft 365 phishing campaign is targeting corporate travelers by hijacking hotel Wi-Fi DNS settings to steal OAuth session tokens. Continue reading
Clop Ransomware Targets PTC Windchill and FlexPLM in Mass Data Theft Campaign
The Clop ransomware group is actively exploiting a critical vulnerability in PTC Windchill and FlexPLM to launch a massive enterprise data theft campaign. Continue reading
Laundry Bear Zero-Click Zimbra Phishing Campaign Warned by CISA
A joint cybersecurity advisory highlights the Laundry Bear zero-click Zimbra phishing campaign targeting Western infrastructure using CVE-2025-66376. Continue reading
CVE-2026-16232: Check Point SmartConsole Zero-Day Flaw Actively Exploited
Discover how the critical CVE-2026-16232 zero-day vulnerability in Check Point SmartConsole is actively exploited to hijack firewall management systems. Continue reading
OAuth Client ID Spoofing Exploited in Mass Cloud Reconnaissance
Discover how threat actors use OAuth Client ID Spoofing to perform stealthy cloud reconnaissance and bypass standard SIEM detection controls. Continue reading
SharePoint RCE Flaw CVE-2026-50522 Actively Exploited to Steal Machine Keys
Discover how the critical SharePoint RCE flaw CVE-2026-50522 is being actively exploited in the wild to exfiltrate machine keys and forge authentication tokens. Continue reading
Phishing-as-a-Service Platform ‘Kratos’ Dismantled by International Law Enforcement
International law enforcement agencies have dismantled the Kratos Phishing-as-a-Service platform, seizing over 200 servers and arresting its alleged administrator in Indonesia. Continue reading
HollowGraph Malware Hijacks Microsoft 365 Calendars for Espionage
Discover how the sophisticated HollowGraph malware utilizes Microsoft 365 calendars as a stealthy command and control channel to exfiltrate sensitive organizational data. Continue reading