Browsing: Persistence

Top Highlights Scale: Token spraying compromised 97 Microsoft 365 accounts across 79 organizations, using stolen…

Summary Points China-aligned Storm-0940 used ARTEX to automate attacks against hundreds of organizations, reaching privileged…

Quick Takeaways Attackers used vendor credentials from 144.172.64[.]128 to access ConnectWise application identities. In two…

Fast Facts Malicious npm packages like "imgdecode" and related tools exploit Node.js environments to deploy…

Fast Facts A China-linked espionage group exploited a zero-day flaw in BeyondTrust Remote Support to…

Fast Facts ARMORY CASTLE exploited CVE-2026-102764, a zero-day vulnerability in BeyondTrust Remote Support, to upload…

Fast Facts Chinese-linked group Integrity Technology Group uses open-source tools, exploit codes, and XSS vulnerabilities…

Fast Facts A China-linked group exploited known vulnerabilities in widely used software like ProFTPD, ONLYOFFICE,…

Summary Points Threat actors are exploiting legitimate RMM tools like Action1 by deploying malicious phishing…

Fast Facts The ShinyHunters group has breached over 140 organizations, stealing at least $70 million…