Threat Intelligence Center

Security researchers have identified a critical vulnerability in Microsoft Edge where passwords are stored in process memory, making them accessible to attackers with local system access or malware execution capabilities. This exposure is particularly concerning for energy and utilities organizations, where credential compromise could facilitate lateral movement and data theft.

A college student has filed suit against Meete, a dating application, alleging the platform harvested her TikTok videos without authorization and used that data to target male students within her dormitory. The case adds to a growing wave of privacy lawsuits over unauthorized data collection.

Microsoft security researchers have documented a targeted phishing campaign that exploits employee trust in internal compliance processes. Attackers craft convincing fake compliance notices impersonating Microsoft's own compliance and legal teams, tricking employees into providing credentials and multi-factor authentication details.

Security researchers have identified ConsentFix v3, an evolved attack framework targeting Azure OAuth implementations through automated consent phishing. This threat leverages legitimate OAuth flows to establish persistent access to cloud environments without triggering traditional authentication alerts.

Security researchers have identified a malware distribution campaign leveraging malicious advertisements for Homebrew, the popular macOS package manager, to deliver MacSync Stealer. This attack exploits user trust in legitimate development tools to compromise macOS systems.

Endpoint Detection and Response (EDR) and Identity Threat Detection and Response (ITDR) platforms often operate independently, leaving a critical gap in attack detection. When adversaries compromise credentials or abuse identity services, EDR systems miss the lateral movement patterns while ITDR lacks visibility into endpoint behavior.