Microsoft Tracks Storm-2570 Ransomware Affiliate Behind Qilin, DragonForce and Anubis Attacks
Threat Intelligence is tracking Storm-2570, a ransomware affiliate linked to attacks involving Qilin, DragonForce, Anubis, and BERT.
Although the ransomware payload changes, Microsoft says...
Microsoft Defender Launches ISOC to Build AI-Powered Security Operations Center
The announcement addresses a growing problem for defenders, attackers can use AI agents to automate parts of an operation, while security teams still spend...
EvilTokens Phishing Service Uses AI and Device Code Attacks to Hijack Microsoft Accounts
The service was linked to more than 12,000 compromised inboxes across over 10,000 organizations worldwide and is tracked by Microsoft as Storm-2992.
EvilTokens emerged in...
Passkey Phishing Hijacks Microsoft 365 Accounts for Cloud Data Theft
The activity, observed since May 2026, relies heavily on social engineering. Victims may receive a phone call, SMS message, or Microsoft Teams message from...
Hackers Abuse Legitimate Node.js Runtime to Hide Persistent Backdoor in Enterprise Attacks
Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its access code. Once inside, they...