Microsoft reports 7.3 billion email phishing threats in Q3 2026
The report shows QR code phishing dropped 67% but business service spoofing hit 129 million messages with tenant exceptions weakening protections.
1
Stories per day · 30 days
3 RSS
Relatedakamai1captivecrunch1chocoshell1cornflake1email-phishing1information-sharing1mdr1microsoft1microsoft-3651midnight-blizzard1msp1phishing1powershell1qr-code1storm-29451threat-hunting1tlp1unit421
11 stories, newest first · one card per story
Stories tagged #threat-intel
Unit 42 reports AI tools aiding cyberespionage and extortion
Threat actors integrate LLMs for social engineering while state-sponsored groups focus on IP theft.
1
Top 11 Threat Hunting Services Ranked in 2026
CrowdStrike OverWatch leads for Falcon estates while Google Mandiant and Red Canary provide targeted and open methodologies.
1
Akamai argues TLP labels are binding, not optional
The October 22 post outlines why breaking Traffic Light Protocol sharing rules is costly, but the captured text has no cases or figures.
1
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
ReversingLabs found a Midnight Blizzard-linked server still serving ChocoShell and CornFlake on October 5.
5
Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
Hunt.io says BraZetsu access-broker infrastructure kept stable TLS and hosting patterns months before public IOCs.
2
TTY Logs and the Data it Captures, (Sun, Oct 4th)
SANS diary correlates DShield honeypot TTY logs, finding one crontab pattern used by over 3,130 IPs.
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
Weekly ThreatsDay digest: OFAC sanctions Tren de Aragua ATM jackpotting network, blockchain malware dead drops surge, plus cache-poisoning and EDR-evasion research.
3
COBRA: A Content-Agnostic Framework for Zero-Day Detection of Suspicious Domains
COBRA clusters newly registered domain names to flag suspicious domains at registration time, finding 47K domains with 98.5% precision before threat intel does.
The Tale of Two INC Ransom Notes: A Ransomware Timeline | Huntress
Huntress reconstructed an INC ransomware attack hitting 175 endpoints and domain controllers, with two ransom notes dropped 53 minutes apart.
1
Low-quality casino sites conceal highly dangerous threat actors
Infoblox reveals China-aligned APT groups hiding PeckBirdy malware C2 domains inside roughly 1.7 million Chinese-language illegal casino websites.