CISA adds path traversal vulnerability in Unix versions unRAR utility to Known Exploited Vulnerabilities Catalog<\/p>\n\n\n\n
Attackers exploiting open redirects to Snapchat and Amex websites as part of phishing campaign<\/p>\n\n\n\n
Kimsuky threat actor using SHARPEXT browser extension to steal mail data directly from webmail sessions<\/p>\n\n\n\n
Threat actor exploits Atlassian Confluence bug to deploy Ljl backdoor<\/p>\n\n\n\n
Manjuska, a new attack framework imitating Cobalt Strike, being used and may become more prevalent<\/p>\n\n\n\n
Prevalent Trojans from July 29 \u2013 Aug 5 and their associated IOCs<\/p>\n\n\n\n
X-FILES infostealer gains new variant, exploiting Follina vulnerability, distributed via phishing<\/p>\n\n\n\n
CPR claims that Emotet botnet most prevalent malware in July 2022, followed by Formbook infostealer and XMRig Monero crypto miner<\/p>\n\n\n\n
Commodity malware top threat Cisco responded to in Q2 2022, Education in top 3 targeted industries<\/p>\n\n\n\n
As threat actors pivot away from macros, Windows Explorer becomes top living-off-the-land binary used to execute malware through Windows LNK files<\/p>\n\n\n\n
Trends in email threat landscape include LNK files, HTML smuggling, and shellcode hidden in Office documents<\/p>\n\n\n\n
Cisco releases more details on a breach they suffered from an employee\u2019s compromised Google account and MFA fatigue<\/p>\n\n\n\n
Zimbra authentication bypass vulnerability being actively exploited to compromise Zimbra email servers<\/p>\n\n\n\n