Skip to content
September 2026

September 2026

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from… 

Read More »17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is… 

Read More »OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Ravie LakshmananSep 24, 2026Cloud Security / Identity Security Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the… 

Read More »TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious… 

Read More »Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry