Email security

The report highlights a shift towards stealth and efficiency, with threat actors prioritizing speed, automation, and return on effort over complex exploits.

The OAuth URLs intentionally include an invalid scope, forcing redirection to malicious sites.

Attackers are using IPv6 address ranges to gain control over .arpa subdomains, pointing them to servers hosting phishing pages.

The most critical vulnerability, CVE-2025-49113, is a deserialization of untrusted data flaw with a CVSS score of 9.9.

Organizations in the U.S., Canada, the UK, and Northern Ireland have had their PCs compromised in intrusions involving fake U.S. Social Security Administration emails and ConnectWise ScreenConnect exploits, HackRead reports.

The incident began when a police officer intended to send a link for the man to upload images related to an investigation but instead mistakenly shared a download link to sensitive police files.

Security Affairs reports that well known Japanese sex toy manufacturer Tenga has confirmed being impacted by a data breach following the compromise of an employee's email account.