⤷ Title: Microsoft and Global Law Enforcement Dismantle PhaaS Empire
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 07:56:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #Microsoft #PhaaS #phishing #security
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 07:56:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #Microsoft #PhaaS #phishing #security
Information Security News
Microsoft and Global Law Enforcement Dismantle PhaaS Empire
When our mobile devices receive fraudulent text messages demanding toll payments, package delivery fees, or urgent banking notifications, most of us simply block the sender or delete the message. …
⤷ Title: CVE-2026–47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration
════════════════════════
𐀪 Author: Jianyang Song
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 00:00:03 GMT
════════════════════════
⌗ Tags: #ai_security #prompt_injection_attack #microsoft #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Jianyang Song
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 00:00:03 GMT
════════════════════════
⌗ Tags: #ai_security #prompt_injection_attack #microsoft #cybersecurity #bug_bounty
Medium
CVE-2026–47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration
I reported this vulnerability to Microsoft MSRC on March 15, 2026. Microsoft confirmed the issue, rated it as Critical, awarded a $12,000…
⤷ Title: Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 10:34:53 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Microsoft #Security #CoGUI #Cybersecurity #Fraud #Iron Man #Phishing #YAM Store
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 10:34:53 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Microsoft #Security #CoGUI #Cybersecurity #Fraud #Iron Man #Phishing #YAM Store
Hackread
Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages
Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1 billion malicious messages since January 2026.
⤷ Title: Windows 11 Wi-Fi Authentication Broken by KB5127648
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 13:51:57 +0000
════════════════════════
⌗ Tags: #Windows #Enterprise Security #KB5127648 #Microsoft #wifi #Windows 11
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 13:51:57 +0000
════════════════════════
⌗ Tags: #Windows #Enterprise Security #KB5127648 #Microsoft #wifi #Windows 11
Daily CyberSecurity
Windows 11 Wi-Fi Authentication Broken by KB5127648
Microsoft recently deployed the cumulative security update KB5127648 for Windows 11. However, newly released cumulative patches often introduce unforeseen technical hurdles. Specifically, enterpri…
⤷ Title: Windows 11 Remote Desktop Fails with Admin Protection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 01:58:40 +0000
════════════════════════
⌗ Tags: #Windows #Administrator Protection #KB5124010 #Microsoft #Remote Desktop #Windows 11
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 01:58:40 +0000
════════════════════════
⌗ Tags: #Windows #Administrator Protection #KB5124010 #Microsoft #Remote Desktop #Windows 11
Daily CyberSecurity
Windows 11 Remote Desktop Fails with Admin Protection
Microsoft recently updated its release health dashboard to confirm an emerging remote connectivity defect. Specifically, Windows 11 devices installing cumulative update KB5124010 or subsequent rel…
⤷ Title: Credential Compromise Turns a Backup Tool Into a Global Administrator Control Plane
════════════════════════
𐀪 Author: Prashant Thakur
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 19:49:52 GMT
════════════════════════
⌗ Tags: #technology #tech #hacking #microsoft #cybersecurity
════════════════════════
𐀪 Author: Prashant Thakur
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 19:49:52 GMT
════════════════════════
⌗ Tags: #technology #tech #hacking #microsoft #cybersecurity
Medium
Credential Compromise Turns a Backup Tool Into a Global Administrator Control Plane
Hackers used a single stolen ConnectWise Cloud Backup credential to sign into 173 Microsoft 365 tenants on October 15, 2026. An automated…
⤷ Title: ConnectWise Cloud Backup Breach: How a Trusted Application Put Microsoft 365 Tenants at Risk
════════════════════════
𐀪 Author: Aadarsh Haldar
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:46:21 GMT
════════════════════════
⌗ Tags: #hacking #cloud #cloud_computing #microsoft #cybersecurity
════════════════════════
𐀪 Author: Aadarsh Haldar
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:46:21 GMT
════════════════════════
⌗ Tags: #hacking #cloud #cloud_computing #microsoft #cybersecurity
Medium
ConnectWise Cloud Backup Breach: How a Trusted Application Put Microsoft 365 Tenants at Risk
ConnectWise Cloud Backup Breach: How a Trusted Application Put Microsoft 365 Tenants at Risk An investigation into application identity abuse, cloud supply-chain security, privilege escalation, and …
⤷ Title: Exchange Server Instability Tied to October Windows Updates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 01:26:05 +0000
════════════════════════
⌗ Tags: #Technology #Endpoint Mapper #Exchange Server #Microsoft #October 2026 Windows Updates #OWA #Patch Tuesday #Windows Server
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 01:26:05 +0000
════════════════════════
⌗ Tags: #Technology #Endpoint Mapper #Exchange Server #Microsoft #October 2026 Windows Updates #OWA #Patch Tuesday #Windows Server
Daily CyberSecurity
Exchange Server Instability Tied to October Windows Updates
Microsoft is warning admins about Exchange Server instability after the October 2026 Patch Tuesday cycle. Since October 13, some on-premises servers have started failing under load. However, the c…
⤷ Title: The Backup Tool Became the Backdoor: Inside the ConnectWise Application Identity Compromise
════════════════════════
𐀪 Author: GraySentinel- Cyber Defence Lab
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 05:15:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #threat_intelligence #application_security #microsoft
════════════════════════
𐀪 Author: GraySentinel- Cyber Defence Lab
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 05:15:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #threat_intelligence #application_security #microsoft
Medium
The Backup Tool Became the Backdoor: Inside the ConnectWise Application Identity Compromise
The October 2026 ConnectWise incident shows a fundamental flaw in the way the managed service provider ecosystem assigns trust to vendor…
⤷ Title: Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:07:29 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Calendar Invites #Check Point #Cyber Attack #Cybersecurity #Microsoft #Microsoft Teams #Outlook #Phishing #Scam #security
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:07:29 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Calendar Invites #Check Point #Cyber Attack #Cybersecurity #Microsoft #Microsoft Teams #Outlook #Phishing #Scam #security
Hackread
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new findings from CPR.