DXC Security Threat Intelligence Report

A new generative AI tool called WormGPT helps malicious actors automate the creation of highly convincing, personalized fake emails for sophisticated phishing and business email compromise attacks.

Apple has addressed a vulnerability found by Microsoft researchers that lets attackers install “undeletable” malware and circumvent security checks to access a victim’s private data.

Ivanti has patched an actively exploited zero-day authentication bypass vulnerability impacting its Endpoint Manager Mobile (EPMM) mobile device management software (formerly MobileIron Core).

Four actors appear to be deploying and developing a sophisticated and mysterious malware toolkit in Russia and Eastern Europe for highly targeted cyber intelligence operations related to Ukraine.

A Chinese nation-state actor that accessed Microsoft Outlook by forging Azure Active Directory (AD) tokens may also have forged access tokens to OneDrive, SharePoint, Teams and other AD applications. 

The state-sponsored North Korean Lazarus hacking group known for hijacking Windows Internet Information Service (IIS) web servers to access corporate networks also distributes malware.

The Clop gang now scares companies into paying a ransom by threatening to post stolen data on publicly available websites dedicated to specific victims.

Newly discovered WyrmSpy and DragonEgg spyware from the Chinese state-backed APT41 cyber-espionage group targets Android devices, indicating that mobile endpoints are high-value data targets.