A phishing technique named CoPhish misuses Microsoft Copilot Studio to deceive users into giving hackers access to their Microsoft Entra ID accounts. Datadog Security Labs identified a method that uses customizable AI agents on legitimate Microsoft domains to disguise OAuth consent attacks, making them seem trustworthy and avoiding user suspicion. …

The “CISO Best Practices Cheat Sheet” is a concise, high-level guide designed to help Chief Information Security Officers (CISOs) and senior security leaders manage and mature their organization’s information security strategy. It’s typically created by cybersecurity vendors (like Wiz, Palo Alto Networks, or SANS Institute) as a strategic reference sheet—something …

Mysterious Elephant is an active APT group identified by Kaspersky GReAT in 2023. It continually evolves its tactics to avoid detection. The group’s recent campaign, starting in early 2025, shows a notable change in their tactics, focusing more on new custom tools and open-source tools like BabShell and MemLoader. The …