Search: “Microsoft Teams for Android”

12 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 133 Malware 114 Ransomware 91 Exploit / PoC 91 Data breach 48 Policy & legal 27 Threat actor 22 Phishing & fraud 22 Industry 14 AI safety & security 9 Advisory 5 Tools 4 Research 3 AI tools & infra 3

SeverityAll critical 339 high 135 medium 77 low 20 info 17

Risky Bulletin: Slovakia finds Russian backdoor in traffic speed cameras

Slovakia's NBU found an SMS-triggered backdoor in Russian-made NERO R-ONE traffic cameras, pausing a 279-unit deployment.

Slovakia's national security service NBU issued an alert against NERO R-ONE high-speed traffic cameras after finding a backdoor that grants shell and network access via SMS from hardcoded Russian phone numbers. The cameras are a rebranded version of the Russian CORDON PRO.M model by St. Petersburg firm Semicon, purchased via a Cyprus shell company under a €30 million EU-funded project. The report also found SecureBoot disabled, vulnerable web management, and unauthenticated live streams; the Interior Ministry paused deployment of 279 cameras pending independent assessment.

Risky Business NewsAug 19, 04:52 UTC · 29d agoThreat actor in the wild1

Facebook Tracks APT32 OceanLotus Hackers to IT Company in Vietnam

The Hacker NewsDec 11, 17:35 UTC · Dec 11, 2020Threat actor

Sandworm hackers have a CAPTCHA trick for Ukrainians

The RecordJul 16, 13:54 UTC · Jul 16, 2026Threat actor1

Meta Uncovers Massive Social Media Cyber Espionage Operations Across South Asia

The Hacker NewsMay 4, 12:49 UTC · May 4, 2023Threat actor

Iran-linked APT42 is behind over 30 espionage attacks

Security AffairsSep 11, 13:31 UTC · Sep 11, 2022Threat actor

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.

The weekly recap leads with a US government warning that threat actors use AI-generated scripts and Censys/ZoomEye scanning to attack internet-exposed Siemens S7 PLCs in water, energy and manufacturing, calling it an active threat. Other stories include active exploitation of GitLab CVE-2026-19478 (CVSS 9.4, unauthenticated project rewriting), 14 trojanized npm packages delivering the RedC2 4.0 Linux backdoor, and the Zombie Card attack that revives expired Visa cards for contactless payment fraud. It also covers suspected Russian clusters UNC6293, UNC7005 and UNC5976 phishing campaigns, a faster Cloudflare Workers Spectre JWT leak, and a bespoke Cl0p JSP web shell deployed after exploiting PTC Windchill flaws.

The Hacker NewsAug 28, 08:05 UTC · 20d agoThreat actor in the wildCVE-2026-194781

Capitalizing on Coronavirus Panic, Threat Actors

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Threat actor CVE-2017-11882

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

Microsoft warns of Teams IT-impersonation intrusions deploying Node.js implants; Spring Ring vishing hit 150+ employees across 10 companies; The Gentlemen ransomware claims 683 victims.

Microsoft warned of a human-operated campaign abusing Teams external collaboration to impersonate IT help desk staff, deploy malicious MSI packages staging Node.js runtimes and obfuscated JavaScript implants, then pivot to domain controllers over WinRM. Unit 42 documented the Spring Ring vishing operation targeting over 150 employees across at least 10 companies using 26 attacker identities, including an NTLM relay variant against domain controllers. Sophos reported The Gentlemen ransomware (Gold Sherwood) reached 683 total victims by end of July 2026, adding 169 in July, with a playbook using BYOVD-based EDR killers and backup tampering. Group-IB found the Outsider phishing-as-a-service platform created 700+ new phishing pages within a month despite law enforcement takedowns.

The Hacker NewsSep 3, 18:02 UTC · 13d agoThreat actor in the wild1

The “Red October” Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies

Kaspersky SecurelistJan 14, 19:48 UTC · Jan 14, 2013Threat actor CVE-2009-3129 CVE-2010-3333 CVE-2012-0158

From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools

The Hacker NewsNov 22, 06:13 UTC · Nov 22, 2025Threat actor CVE-2022-26134 CVE-2021-44228 CVE-2017-9805+2 CVEs

H1 2026 Malware Vulnerability Trends

Recorded Future's H1 2026 report finds 215 actively exploited CVEs, RAT dominance, NFC payment fraud, and AI-augmented but not autonomous tradecraft.

Recorded Future's Insikt Group identified 215 actively exploited CVEs in H1 2026, up 34% from 161 in H1 2025, with the most impactful flaws combining network reachability, no authentication, and code execution. AsyncRAT was the top malware family, with AsyncRAT, Cobalt Strike, XWorm, Stealc, and REMCOS remaining top-ten staples; Android NFC malware like NFCShare and NGate enabled payment card theft and ATM cash-outs. AI-enabled attacks remained additive to established tradecraft, concentrated in Levels 1-3 of Recorded Future's AIM3 maturity model, with AI-assisted vulnerability research (e.g., Claude Mythos fixing 271 Firefox bugs in Firefox 150) inflating NVD disclosure volumes 43% above the prior six-month average. The report urges defenders to prioritize remotely exploitable RCE flaws, behavioral detection, developer credential security, and third-party oversight.

Recorded FutureSep 3, 00:00 UTC · 14d agoThreat actor in the wild1

APT annual review: What the world’s threat actors got up to in 2020

Kaspersky SecurelistDec 3, 11:00 UTC · Dec 3, 2020Threat actor