From inbox clutter to costly compromise: Why email threats still matter
Email-based attacks aren’t relics of the past. They’re active, sophisticated, and increasingly lucrative for attackers.
Similar Posts
ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories
Bys sThis week’s updates show how small changes can create real problems. Not loud incidents, but quiet shifts that are easy to miss until they add up. The kind that affects systems people rely on every day. Many of the stories point to the same trend: familiar tools being used in unexpected ways. Security controls are…
CrowdStrike catches insider feeding information to ScatteredLapsus$Hunters
Bys sSergiu Gatlan reports another reminder of the insider threat: American cybersecurity firm CrowdStrike has confirmed that an insider shared screenshots taken on internal systems with hackers after they were leaked on Telegram by the Scattered Lapsus$ Hunters threat actors. However, the company noted that its systems were not breached as a result of this incident……
Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks
Bys sRavie Lakshmanan reports: Microsoft on Sunday released security patches for an actively exploited security flaw in SharePoint and also disclosed details of another vulnerability that it said has been addressed with “more robust protections.” The tech giant acknowledged it’s “aware of active attacks targeting on-premises SharePoint Server customers by exploiting vulnerabilities partially addressed by the July Security Update.” CVE-2025-53770 (CVSS…
Western Security Agencies Share Advice on Selecting OT Products
Bys sCISA and other Western security agencies have shared guidance for OT owners and operators when procuring products. The post Western Security Agencies Share Advice on Selecting OT Products appeared first on SecurityWeek.
Darktrace to Acquire Incident Investigation Firm Cado Security
Bys sDarktrace has announced the proposed acquisition of UK-based incident investigation firm Cado Security, reportedly for up to $100 million. The post Darktrace to Acquire Incident Investigation Firm Cado Security appeared first on SecurityWeek.
Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan
Bys sCybersecurity researchers have discovered two malicious packages in the Python Package Index (PyPI) repository that masquerade as spellcheckers but contain functionality to deliver a remote access trojan (RAT). The packages, named spellcheckerpy and spellcheckpy, are no longer available for download, but not before they were collectively downloaded a little over 1,000 times. “Hidden inside the