Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
1. Executive summary A threat actor tracked by Okta as "O-UNC-066" is conducting voice-phishing (vishing) attacks against Microsoft 365 users across
1. Executive summary A threat actor tracked by Okta as "O-UNC-066" is conducting voice-phishing (vishing) attacks against Microsoft 365 users across
TL;DR: We integrated urlquery.net as a second web scanning engine alongside urlscan.io in our MCP-powered phishing infrastructure pipeline. The re-run of
1. Executive summary On 10 July 2026, HM Treasury (HMT) designated the first four Critical Third Parties (CTPs) under the UK financial regulatory regime: Amazon Web
1. Executive summary On 2026-07-10, the ransomware actor "nova" publicly claimed a victim named Hynet, a UK-based provider of data storage
1. Executive summary Huntress is tracking a massive, automated password spray attack targeting Microsoft's Azure command-line interface (CLI), originating from IPv6 address range
1. Executive summary On 2026-07-09, the actor "cmdorganization" publicly claimed a ransomware attack against Finance Yorkshire (GB), a UK-based SME funding
1. Executive summary CISA ICS Advisory ICSA-26-190-02 discloses six vulnerabilities in Schneider Electric PowerChute Serial Shutdown (versions 1.4 and prior) running on
1. Executive summary Microsoft Threat Intelligence has detailed GigaWiper, a Golang-based modular backdoor first observed in October 2025 that integrates destructive wiper payloads, fake ransomware,
1. Executive summary A new phishing-as-a-service (PhaaS) platform dubbed "Forg365" has been identified by ZeroBEC researchers, specifically targeting Microsoft 365 accounts
1. Executive summary Microsoft has released Microsoft Malware Protection Engine version 1.1.26060.3008, patching CVE-2026-50656 — a local elevation of privilege zero-day
1. Executive summary Infoblox has disclosed a threat actor dubbed "Lurking Lizard" operating an end-to-end malicious residential proxy business using trojanized installers
Date: July 8, 2026 Subject: Analysis of the Accenture 35GB data breach claim Classification: Open-source intelligence report Executive Summary A threat actor using the alias