Attackers abuse Microsoft Teams external chats in IT support scams
Microsoft Teams IT support scams lead to ransomware deployment, Emperador claims AB InBev breach, and HashiCorp Consul CVEs surface.
In this digest
Security Intel Feed
Cyber Hose
Page 5 of 91
Read digest
Industrial Vendors Confirm Products Affected by PHP2Shell PHP Flaws
Critical PHP2Shell RCE flaws hit major industrial vendors, plus Qwen3-Coder bias and Genesys data breach.
In this digest
M365 token-replay campaign via AiTM relays hits 79 organizations
A 10-week M365 AiTM token-replay campaign compromised 97 accounts across 79 organizations, alongside Gheist's GitHub token abuse and uCreator Android spyware.
In this digest
Microsoft Authenticator Flaw Lets Android Apps Steal Account Tokens
A Microsoft Authenticator flaw allowing token theft headlines this run, alongside a CBFC data breach exposing 500+ film titles.
In this digest
Forged signed tokens enable account takeover in GitroomHQ postiz-app
CVSS 9.9 token forgery in postiz-app headlines this run, alongside a CPython SSL hardening fix and a WordPress plugin RCE.
In this digest
- CVE-2026-115933 — GitroomHQ postiz-app — CVSS 9.9 — Forged signed tokens let any registered user take over other users and organizations
- CVE-2026-115557 — Python Software Foundation CPython — CVSS 9.4 — Distrust compromised intermediate certificates in ssl module
- CVE-2026-94267 — WPScan Advanced Custom Fields: Extended — CVSS 9.0 — Unauthenticated RCE via Front-End
PHP2Shell: Critical PHP RCE flaws exploited before patch
Critical PHP RCE flaws dubbed PHP2Shell exposed 22.6M instances to exploitation, CISA adds Collabora flaw to KEV, and Dell patches hundreds of CVEs.
In this digest
k0t hacks firewalls and VPNs, leaks 70,000+ credentials
Threat actor k0t breaches enterprise firewalls worldwide exposing 70,000+ credentials, plus critical GitLab RCE flaws and the first autonomous AI ransomware.
In this digest
k0t Campaign Breaches FortiGate and GlobalProtect, Exposing 70,000+
The k0t threat actor breached Fortinet and Palo Alto edge devices worldwide, stealing over 70,000 credentials and gaining persistent access.
In this digest
Arista patches third exploited VeloCloud Orchestrator zero-day
Arista patches a third exploited VeloCloud Orchestrator zero-day, PHP2Shell attempts surge, and LiteLLM suffers a supply chain attack.
In this digest
Ransomware breaches ~40 shipping companies via supply chain attack
Supply chain ransomware hits 40 shipping firms, Quest Diagnostics breach, Oracle emergency Java patch, and Cisco Expressway RCE fix.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check