Threat Intelligence Center

Brickcom IP cameras deployed across healthcare facilities, financial institutions, and critical manufacturing environments contain authentication vulnerabilities that expose networks to unauthorized access. These cameras, commonly integrated into facility management and surveillance systems, lack sufficient access controls that could allow attackers to compromise network perimeters.

Threat actors behind the Sneaky2FA campaign are employing aged-domain acquisition as a primary evasion technique to circumvent email security controls. By registering or purchasing domains with established reputation histories, operators bypass the sender reputation scoring mechanisms that modern mail filters rely on to detect phishing.

BPFdoor represents a significant threat to telecom infrastructure, leveraging kernel-level persistence mechanisms to evade traditional detection methods. This malware demonstrates how threat actors can maintain long-term access to critical network systems.

Palo Alto Networks Unit 42 has documented a phishing campaign leveraging Browser-in-the-Browser technology to deploy fake Microsoft 365 login popups. The Kali365 attack embeds a functional browser window within a browser, creating a nearly undetectable credential harvesting mechanism.

Security researchers have identified a critical vulnerability in Microsoft Exchange that allows attackers to spoof arbitrary email addresses, bypassing standard sender validation controls. The attack exploits PowerShell command execution within Exchange to manipulate message headers and sender information.

Red teaming—the practice of simulating adversarial attacks to identify AI system vulnerabilities—has transitioned from academic exercise to operational threat. Intelligence indicates that nation-states and sophisticated cybercriminal groups are adopting red teaming methodologies to probe defenses in aviation, customer service, human resources, and sales operations.