A threat campaign called VEILDrive utilizes Microsoft services like Teams and SharePoint to distribute malware via spear-phishing attacks. By exploiting trusted infrastructures, attackers have evaded detection, deploying Java-based malware through OneDrive for command-and-control functions.

Cybersecurity experts warn that the Winos command-and-control framework is spreading through gaming apps like installation tools and speed boosters. Winos 4.0, rebuilt from Gh0st RAT, executes a multi-stage infection, targeting users and gathering sensitive information.

Budget season brings challenges for cybersecurity investments, particularly for Continuous Threat Exposure Management (CTEM). CTEM is critical; it shifts organizations from reactive to proactive stances against threats, ensuring vulnerabilities are addressed before exploitation, ultimately saving costs associated with breaches and enhancing overall security resilience.

INTERPOL dismantled over 22,000 malicious servers linked to cyber threats in Operation Synergia II, running from April to August 2024. The operation saw the seizure of 59 servers and the arrest of 41 individuals, marking a significant blow to phishing and ransomware operations.

Google Cloud will enforce mandatory multi-factor authentication (MFA) for all users by the end of 2025, addressing security concerns amid rising phishing threats. The rollout will occur in three phases, starting November 2024, ensuring a smooth transition for users.