Phishing 3.0: Agentic AI Drives the Need for Defensive Agents
Phishing has evolved from malicious content (Phishing 1.0) to malicious intent (Phishing 2.0) and now to AI-powered, multi-channel attacks (Phishing 3.0). In…
Tag: Microsoft
Microsoft 365 EOP Phishing Miss Rates
Microsoft 365 EOP is a cloud-based email filtering service. IRONSCALES analysis shows it misses 293 phishing messages per 100 mailboxes every 30…
Microsoft Security Copilot: AI-Powered SOC Assistant
Microsoft Security Copilot is an AI assistant that helps security teams triage alerts and automate responses. It identified 6.5 times more malicious…
Microsoft Defender Experts: Managed Threat Hunting
Microsoft Defender Experts is a managed threat hunting service that identified and analyzed MacSync Stealer infrastructure, providing actionable intelligence and guidance.
Microsoft Ties 30+ Rotating Domains to MacSync Stealer Infrastructure
Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, by correlating endpoint and network…
Microsoft Copilot Personal Flaws Enable One-Click Data Exfiltration via CoSnitch
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, that could allow a single click on a…
TWINLOOT Malware Abuses SharePoint and Teams to Steal Credentials and Pivot Networks
Cybersecurity researchers have uncovered a new Python-based implant framework called TWINLOOT that abuses trusted Microsoft services for command-and-control (C2) operations. The malware,…
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
Cybersecurity researchers have uncovered a typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, tracked as StubMaker by OpenSourceMalware,…
CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD…
CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint Weak Authentication Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…