Attackers abuse enterprise AI tools for theft, C2, and agent hijacking
A fake Postmark MCP package siphoned mail after 15 clean versions, and SesameOp hid C2 in the OpenAI Assistants API.
52
Vendor
ActiveCampaign
- Mentions · 7d1
- Mentions · 30d1
- All mentions2
- First seenSep 4, 2026
- Last mentioned3d ago
Timeline
2 articles · newest firstPhishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
Microsoft warns of a high-volume phishing campaign using invisible Unicode characters to split keywords like 'funding' and evade filters, peaking at 2.37 million daily messages.
60
Related CVEs
by mentions- CVE-2026-2525332%8.8One-Click WebSocket Token Leak Enabling RCE in OpenClaw (Moltbot/Clawdbot)
- CVE-2025-327117%7.5Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network
Appears with
- Microsoftvendor · 2
- ChainDropmalware · 1
- Shai-Huludmalware · 1
- Microsoft 365 Copilotproduct · 1
- SesameOpmalware · 1
- Check Pointorganization · 1
- U.S. Small Business Administration loan applicantsvictim · 1
- OpenClawproduct · 1
- Fortra FIREorganization · 1
- Fortravendor · 1
- Helmet Securityorganization · 1
- Postmarkproduct · 1
- OpenAIvendor · 1
- Radwareorganization · 1
- Jozuorganization · 1
- Grokai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.