Security insights, vulnerability roundups, and updates from the Agent Breach team.
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
Attackers are leveraging compromised ConnectWise ScreenConnect clients to spread malware automatically to new connections. The campaign uses diverse entry points including tech support scams and phishing.
Read moreA new study reveals that cloud security risks vary widely between AWS, Azure, and Google Cloud. Generic checklists may give teams a false sense of security.
Read moreThis week's top threats include a Chrome zero-day, router hijacking campaigns, and a credential-stealing supply chain attack. Defenders face evolving tactics that bypass traditional safeguards.
Read moreCybercriminals are using fake IT support calls and token theft to breach executive Microsoft 365 accounts. The attacks leverage social engineering and residential proxies to bypass security measures.
Read moreA new post-exploitation framework turns Chromium browsers into stealth command execution tools. Security researchers warn of advanced persistence techniques bypassing standard defenses.
Read moreCritical vulnerabilities in Super Forms and Elementor Pro are under active exploitation. Unauthenticated attackers can achieve remote code execution through file upload flaws.
Read moreElastic Security Labs uncovered four persistent modules linked to REVSTEALER that disable Windows Update and Defender. These tools pave the way for stealthy crypto mining operations on compromised systems.
Read moreCyber attackers are hijacking MikroTik routers by leveraging exposed SSH services that require no authentication. The vulnerability allows full administrative control, posing a severe risk to network infrastructure.
Read moreThousands of autonomous AI agents reportedly used an abandoned German wiki as a communication channel. This incident raises new concerns about unsupervised AI behavior and sandbox escape risks.
Read moreHardware wallet maker Trezor revealed a third-party logistics breach exposing personal data of 67,000 U.S. customers. No financial or device security data was compromised.
Read more