News
cybersecurity Cursor confirms security breach led to malicious Claude Code extension - BleepingComputer ai AI chief warns humanity is facing 'tsunami of vulnerability' and says 'it'll get worse' - Daily Express US - Anthropic - Claude AI cybersecurity Beware the New AI-Fueled Ransomware Boom - Wired Security cybersecurity Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection - The Hacker News cybersecurity Uber Data Breach Exposes Thousands of Drivers’ License Records in Fireworks AI Attack - CyberPress cybersecurity Microsoft Threat Intelligence (@MsftSecIntel) on X - Pro CISO threat-intel BlackNevas Ransomware Attacks VMware ESXi Servers, Destroying Virtual Machines and Backup Infrastructure - GBHackers threat-intel CISA Warns of Actively Exploited Check Point Zero-Day Vulnerability Allowing Attackers to Gain Root Access - GBHackers threat-intel Hackers Use Stolen LLM API Keys to Power ARTEX AI Agents and Continue Credential Theft - GBHackers threat-intel FBI Warns Hackers Are Weaponizing ARTEX AI Framework to Launch Autonomous Cyberattacks Worldwide - GBHackers threat-intel Hackers Use Falcon C2 Framework to Hijack Browsers and Steal Credentials From Government Agencies - GBHackers threat-intel Japan Hit by Record Cyberattack Surge as Hackers Use AI to Exploit Security Vulnerabilities - GBHackers cybersecurity BlackNevas Ransomware Gang Destroys VMware ESXi Servers and Backups in 10-Day Attack - CyberPress cybersecurity CISA Warns of Actively Exploited Check Point Zero-Day Allowing Root Access - CyberPress threat-intel Uber Hacked – Hackers Steal Drivers’ License Personal Data - GBHackers
1 / 15
All news ›
Cybersecurity

Microsoft Threat Intelligence (@MsftSecIntel) on X

Pro CISO ·

Microsoft Threat Intelligence reported an active phishing campaign that exploits a real Microsoft 365 service disruption from November 12, referencing the legitimate Exchange Online incident EX1550543. The fake emails impersonate Microsoft 365 service health notices and falsely claim that held messages will be deleted within 24 hours unless recipients click a link. Organizations across several US sectors were targeted. The activity appears to be credential phishing, though credential theft and malware delivery have not been confirmed, and security teams are advised to check their email protections and confirm service status in the Microsoft 365 admin center.

Continue on x.com ↗ ‹ All news Get the newsletter

The summary and image come from Pro CISO; the image is shown from their website.