Microsoft has issued an urgent, out-of-band security update for Microsoft Office to mitigate a high-stakes zero-day vulnerability that
The post Office Under Siege: Microsoft Rushes Emergency Fix for Active Zero-Day appeared first on Penetration Testing Tools.
Experts from Trend Micro have identified the pervasive deployment of PeckBirdy, a malevolent JavaScript framework orchestrated by collectives
The post The Ghost in the Script: China-Linked PeckBirdy Framework Evades Detection via LOLBins appeared first on Penetration Testing Tools.
Fabricated notifications impersonating the Income Tax Department of India have emerged as the facade for a sophisticated malware
The post The Taxman’s Shadow: Blackmoon Trojan Hijacks IT Tools to Spy on Indian Taxpayers appeared first on Penetration Testing Tools.
A newly discovered campaign demonstrates a sophisticated approach to delivering information-stealing malware through a combination of social engineering and legitimate Windows components. The attack begins with a deceptive CAPTCHA prompt that tricks users into executing commands manually through the Windows Run dialog, presenting the infection as a required verification step. Instead of using traditional PowerShell […]
The post Fake CAPTCHA Attack Leverages Microsoft Application Virtualization (App-V) to Deploy Malware appeared first on Cyber Security News.
The American athletic titan Nike has initiated an internal forensic audit following allegations of a substantial corporate data
The post Design Under Siege: Nike Probes 1.4 TB Leak of Secret Manufacturing Blueprints appeared first on Penetration Testing Tools.
WhatsApp has introduced Strict Account Settings, a lockdown-style security feature designed to protect users from highly sophisticated cyber-attacks. The new privacy feature is specifically tailored for individuals who may be targets of advanced threats, including journalists, activists, and public figures who face elevated cybersecurity risks. The instant messaging platform, which already provides default end-to-end encryption […]
The post WhatsApp New Strict Account Settings Option to Protect Your Account from Hackers appeared first on Cyber Security News.
Google announced updates to the Android theft protection features that expand existing safeguards and make stolen devices harder to use. These updates are available on Android 16 and later. One update builds on Failed Authentication Lock, a feature introduced in Android 15 that locks the screen after repeated failed unlock attempts. Google is adding a dedicated on and off toggle in settings, giving users direct control over whether the feature is enabled. Android devices provide … More →
The post Android just got smarter at stopping snatch-and-run phone thefts appeared first on Help Net Security.
4.25 亿封钓鱼邮件狂袭，环比暴涨 148.65%！域内钓鱼攻击增幅 145%，银狐诈骗邮件达 586.16 万封！2025年Q4企业邮箱安全形势骤然升级！
Coremail CACTER邮件安全发布《2025年第四季度企业邮箱安全性研究报告》（以下简称“报告”），深度拆解当下邮件安全高危趋势：钓鱼邮件攻击呈爆发式增长，域内攻击利用内部信任持续渗透，银狐黑产团伙借MaaS模式掀起诈骗狂潮......企业邮箱安全已从“外围防护”迈入”内外夹击”的高风险周期，防护难度再创新高。
风险一：钓鱼邮件翻倍暴涨，境内外攻击同步上升
2025年Q4钓鱼邮件数量激增至4.25亿封，环比上涨148.65%，同比上涨102.87%。攻击格局也发现明显变化——从“境内主导”转向“境内外攻击双高并行”。
从攻击源来看，攻击范围更分散、地域集中度更高。香港地区凭借跨境特性，逐步演变为攻击资源的中转枢纽；越南则已形成规模化、专业化的钓鱼攻击产业链，成为全球钓鱼邮件的“主要策源地”。
防护建议
部署CACTER邮件安全网关，在入口侧实现高强度过滤
·依托99.8%的反垃圾拦截率，高效过滤海量钓鱼邮件；
·借助全球威胁情报库，精准封堵越南、中国香港等高危地区攻击流量
·深度解析邮件内容与附件，提前拦截仿冒链接与恶意载体
风险二：域内钓鱼显著上升，内部信任成突破口
2025年Q4域内钓鱼邮件环比增长145%，累计近9万封。其中，攻击主题高度贴合“会议纪要”“待办事项”“餐费补贴”等内部高频办公场景，此类钓鱼邮件通过“批量覆盖+定向精准”结合的方式，利用内部信任关系实施渗透，隐蔽性极强。
域内钓鱼虽占比仅0.02%，但因内部信任关系，其打开率远高于外部攻击，极易形成“账号泄露→信任劫持→规模扩散”的恶性循环。值得注意的是，被盗账号数大幅下降70%，说明企业账号管控与员工意识已有提升，但内部邮件行为监测仍需强化。
防护建议
采用CACTER防暴卫士+SMC2安全管理中心+CACTER邮件安全网关组合方案：
·实时拦截可疑登录、标记被盗账号，杜绝账号滥用；
·通过全链路行为分析生成用户安全画像，对“批量发送内部通知”等高危行为精准预警，提前遏制域内攻击扩散；
·配合邮件安全网关的域内异常检测机制，筑牢内部信任边界。
风险三：银狐黑产全面爆发，加密对抗持续升级
2025年Q4，银狐黑产团伙的诈骗攻势持续加码，累计监测到相关诈骗邮件达586.16万封，其中11月增幅飙升至159.5%，12月仍保持38.5%的增长态势。该团伙依托MaaS模式（恶意软件即服务），攻击手段兼具规模化与精准性——既会通过撒网式群发扩大覆盖范围，也会针对特定目标开展鱼叉式精准打击。
更值得警惕的是，该团伙的攻击手法已愈发多样化，采用加密压缩包、加密Office文档作为攻击载体，将解压密码暗藏在邮件正文中，以此规避传统检测工具的拦截。这种接近APT攻击（高级持续性威胁）的方式，通过免杀木马实现终端远控与敏感信息窃取，而加密附件的运用，大幅提升检测难度，传统防护工具难以有效破解，给企业带来持续的信息泄露与经济损失风险。
防护建议：
·部署CACTER邮件安全网关：凭借专业解密能力破解加密附件，同时精准检测域内互发的银狐诈骗邮件，阻断盗号后的内部攻击。
·定期开展CACTER反钓鱼演练：针对教育等高危行业，模拟“会议纪要”“补贴申领”等真实高频场景进行钓鱼演练。
2025Q4攻击态势愈加激烈，银狐加密攻击与域内钓鱼的精准狙击，印证邮件安全已迈入“技术精准化+人员靶向化”新阶段。这不仅是年末预警，更是2026年的防护信号：唯有以专业安全网关筑牢技术防线，搭配常态化反钓鱼演练强化意识，才能从被动防守转向主动应对，稳稳守住企业邮件安全。