Tag: initial access vector
6 articles
Microsoft Teams Targeted in IT Support Impersonation Schemes
Beware of scammers impersonating IT support on Microsoft Teams - a recent study found that 1 in 990 external contacts showed signs of impersonation, with 30% of organizations encountering at least one such contact in the first half of 2026. Attackers are now using Teams as a primary tactic to gain access, marking a shift towards more interactive and deceptive methods.
Financial Firms' Software Supply Chain Vulnerability Backlog Reaches Crisis Point
The financial services sector is facing a crisis point as a massive backlog of software supply chain vulnerabilities has finally caught up with it, with exploitation now overtaking phishing as the top breach threat. For years, firms tolerated this risk due to legacy systems, regulatory pressures, and the need for ultra-reliability, but attackers have changed the game.
Cyberattackers Favor Repeatable Playbooks Over Innovative Tactics
Cyberattackers are ditching creative tactics for a straightforward, repeatable playbook - and it's surprisingly effective, with a simple trick called ClickFix accounting for 47% of attacks. This sneaky method involves guiding users through a CAPTCHA-style interaction, then tricking them into pasting a command into a terminal, all without needing attachments or vulnerabilities.
Vulnerability Exploits Overtake Credentials as Top Breach Entry Point
For the first time in nearly two decades, exploiting vulnerabilities has surpassed compromised credentials as the top breach entry point, accounting for 31% of data breaches over the past year. This significant shift suggests that threat actors are adapting their tactics, and defenders must follow suit.
Exploits Emerge as Top Breach Entry Point
With attackers exploiting vulnerabilities at an alarming rate, it's clear that organizations are struggling to keep up with the pace of security defects - and it's leaving them exposed. Exploits have now become the top breach entry point, accounting for 31% of all known initial access vectors.
Obsidian Plugin Abuse Enables PHANTOMPULSE RAT in Finance, Crypto Attacks
Beware of the notebook that's supposed to keep your secrets safe - researchers have discovered a sneaky new attack that uses Obsidian plugin abuse to slip a powerful Trojan into your system. This novel social engineering campaign targets finance and crypto sectors with a previously unknown RAT called PHANTOMPULSE.