Distributed Workforce

The attack leveraged a malicious iCalendar invite over Zimbra email.

Attacks spreading the new FoalShell and StallionRAT payloads have been launched by the Cavalry Werewolf threat operation against state agencies and energy, manufacturing, and mining firms across Russia as part of a new phishing campaign that ran between May and August, reports The Hacker News.

The group also shifted from malicious PowerPoint files to LNK attachments for initial access.

While Oracle said customers received extortion emails, it did not tie the case to Clop, which reportedly claimed responsibility.

Attacks prompt inline SVG image blocking in Microsoft Outlook Increasingly prevalent cyber intrusions involving inline Scalable Vector Graphics images have prompted Microsoft to stop displaying such images in Outlook for Web and the new Outlook for Windows, according to BleepingComputer.

Impact Solutions provides features to disguise file types, perform ClickFix attacks and more.

U.S. organizations have mostly been targeted by a new phishing campaign that harnesses large language models to conceal nefarious payloads within Scalable Vector Graphics files, according to The Hacker News.