Microsoft disclosed two actively exploited security flaws affecting Windows NT LAN Manager (NTLM) and Task Scheduler. These vulnerabilities were part of the 90 addressed in the November 2024 Patch Tuesday update, which included four Critical, 85 Important, and one Moderate flaw.

Cybersecurity researchers have spotlighted GoIssue, a sophisticated tool for sending large-scale phishing messages to GitHub users. This program, promoted by the threat actor cyberdluffy on the Runion forum, enables criminals to extract email addresses from public GitHub profiles.

Cybersecurity researchers have disclosed new security flaws in Citrix Virtual Apps and Desktop, potentially allowing unauthenticated remote code execution (RCE). The vulnerabilities stem from the Session Recording component, which captures user activity and inputs.

applications are being used to deliver malware, indicating a new strategy from DPRK-linked threat actors. This marks a significant development in cyber threats targeting macOS, showcasing the evolving tactics employed by adversaries to compromise Apple systems.

Behavioral analytics, once focused on threat detection, is evolving into a critical post-detection tool that enhances incident response. By utilizing behavioral insights in alert triage and investigation, SOCs can significantly improve their workflows and efficiency.