https://sra.io/blog/chained-account-takeovers-aitm-phishing-campaign-propagating-across-healthcare-and-academic-medical-institutions/#new_tab 2026-08-27T20:46:43Z Security Risk Advisors en 🚩 AiTM Phishing Campaign Chains Compromised Healthcare and Academic Accounts Through Google Sites and ScreenConnect 2026-08-27T20:46:43Z Blog https://r136a1.dev/2026/08/24/sleepwalker-a-passive-backdoor-with-its-own-command-language/#new_tab 2026-08-27T20:45:52Z Security Risk Advisors en 🚩 SLEEPWALKER Passive Backdoor Uses Custom Bytecode Language and Magic Packet Trigger to Evade Detection in ESET Management Agent 2026-08-27T20:45:52Z Blog https://www.microsoft.com/en-us/security/blog/2026/08/26/when-ai-infrastructure-becomes-target-securing-gateways-control-points/#new_tab 2026-08-27T20:44:57Z Security Risk Advisors en 🚩 Attackers Target AI Gateways and Orchestration Platforms for Credential Theft, Persistence, and Cryptomining 2026-08-27T20:44:57Z Blog https://sra.io/blog/chained-account-takeovers-aitm-phishing-campaign-propagating-across-healthcare-and-academic-medical-institutions/ 2026-08-28T14:59:16Z Security Risk Advisors en Chained Account Takeovers: AiTM Phishing Campaign Propagating Across Healthcare and Academic Medical Institutions 2026-08-27T15:19:28Z Blog https://www.group-ib.com/blog/tortoiseshell-apt-toolset-infrastructure/#new_tab 2026-08-26T20:06:20Z Security Risk Advisors en 🚩 Iran-Aligned Tortoiseshell APT Expands Operational Infrastructure Across Europe and Middle East with New TWOSTROKE Backdoor and SSH Tunneling Capabilities. 2026-08-26T20:06:20Z Blog https://www.ic3.gov/CSA/2026/260826.pdf#new_tab 2026-08-26T20:05:05Z Security Risk Advisors en 🚩 China-Linked QTFY Uses Distributed Scanning, IoT Botnets, and Proxy Infrastructure to Target U.S. Critical Infrastructure 2026-08-26T20:05:05Z Blog https://www.island.io/blog/novacookies-at-scale-inside-the-320-phishing-service-targeting-hundreds-of-organizations#new_tab 2026-08-26T20:03:52Z Security Risk Advisors en NovaCookies Commercial Adversary-in-the-Middle Phishing Service Captures Authenticated Microsoft 365 Sessions for $320 Monthly Subscription Across Hundreds of Organizations Globally 2026-08-26T20:03:52Z Blog