Here Come the AI-Generated BEC Scams
Messages delivered through legitimate third-party email infrastructure had C-suite sender display names, custom signatures, and direct approval notes.
All topics
Microsoft
17 Posts
Microsoft Teams Phishing, a Botnet Takedown 23 Years in the Making, and The Cuckoo’s Egg’s Lessons
It’s our one year anniversary! This week we talk about the highlights of the last year, a new high-level phishing campaign that uses Microsoft Teams as an initial access vector, and the takedown of the ancient Sality P2P botnet. Then we offer some book and TV recommendations for the long weekend. Links One year of […]
New Campaign Weaponizes Microsoft Teams for Remote Access
Unlike standard commodity malware that aims for quick credential theft, this campaign features a manual, hands-on-keyboard scheme designed to escalate rapidly from a single compromised workstation to broad, network-wide access.
Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520
The chain leverages two distinct vulnerabilities—an authentication bypass and an unsafe .NET type instantiation flaw—to provide full server control without valid credentials.
Critical SharePoint Bug Under Attack
The flaw (CVE-2026-50522) affects SharePoint Enterprise Server 2016 and 2019 as well as SharePoint Subscription service. Microsoft released the fix for this vulnerability on July 14.
The Cursor Bug Drama, Microsoft’s Massive Patch Tuesday, and Scattered Spider Takes a Hit
This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft–662 bugs–and what it might mean going forward, and finally some news about DoJ sanctions and Scattered Spider members being sentenced. Links Cursor bug: https://decipher.sc/2026/07/15/bug-in… First VPN […]