OAuth Attacks Target Microsoft 365, GitHub

In a cyber twist, attackers behind two of the campaigns are using the apps to redirect users to phishing and malware distribution sites.

Mar. 18, 2025 Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

OAuth Attacks Target Microsoft 365, GitHub‎ In a cyber twist, attackers behind two of the campaigns are using the apps to redirect users to phishing and malware distribution sites.‎‎ Keep Reading →

Apache Tomcat RCE Vulnerability Under Fire With 2-Step Exploit‎‎ The researchers who discovered the initial assault warned that the simple, staged attack is just the beginning for advanced exploit sequences that will test cyber defenses in new and more difficult ways.‎‎

RansomHub Taps FakeUpdates to Target US Government Sector‎‎ A ransomware activity wave using the SocGholish MaaS framework for initial access also has affected banking and consulting firms in the US, Taiwan, and Japan since the beginning of the year.‎‎

Denmark Warns of Increased Cyber Espionage Against Telecom Sector‎‎ A new threat assessment from the Danish Civil Protection Authority (SAMSIK) warned of cyberattacks targeting the telecommunications sector after citing a wave of incidents hitting European organizations the past few years.‎‎

ClickFix Attack Compromises 100+ Car Dealership Sites‎‎ The ClickFix attack tactic seems to be gaining traction among threat actors.‎‎

THE EDGE

How Economic Headwinds Influence the Ransomware Ecosystem‎ Inflation, cryptocurrency market volatility, and the ability to invest in defenses all influence the impact and severity of a ransomware attack, according to incident response efforts and ransomware negotiators.‎

DR TECHNOLOGY

Intel's Secure Data Tunnel Moves AI Training Models to Data Sources‎ The chipmaker's Tiber Secure Federated AI service creates a secure tunnel between AI models on remote servers and data sources on origin systems.‎

SPONSORED ARTICLE

Skuld Stealer Shows Open Source's Dark Side‎‎ Skuld Stealer is an example of malware created with open source that targets an open source platform, Discord.‎‎

Read More →

- Commentary -

Opinions from thought leaders around the cybersecurity industry

How 'Open Innovation' Can Help Solve Problems Faster, Better & Cheaper‎ Cybersecurity is not just a technical challenge but also a very human one. The more humans that organizations can get involved, the more diverse perspectives and experiences that can be tapped into.‎‎

The CISO as Business Resilience Architect‎ To truly become indispensable in the boardroom, CISOs need to meet the dual demands of defending against sophisticated adversaries while leading resilience strategies.‎‎

More Commentary →

- Upcoming Events -

Apr 15, 2025 My Server is Secure. Why Should I Bother about my Mobile App?

Jun 19, 2024 Preventing Attackers From Wandering Through Your Enterprise Infrastructure

Mar 20, 2025 [Dark Reading Virtual Event] Cybersecurity's Most Promising New and Emerging Technologies

More Events →

- More Resources -

WHITE PAPER 6 Key Requirements of Multicloud Security

WHITE PAPER Secure remote access. Simplified.

WHITE PAPER The State of Firewall Security: Challenges, Risks, and Solutions for Modern Networks

REPORT The State of Firewall Security: Challenges, Risks, and Solutions for Modern Networks

More Resources →

- Elsewhere in Cyber Today -

CYBERSECURITY DIVE

Supply Chain Attack Against GitHub Action Triggers Massive Exposure of Secrets

SANS

Mirai Bot Now Incroporating (Malformed?) DrayTek Vigor Router Exploits

MALWAREBYTES

1 in 10 People Do Nothing to Stay Secure and Private on Vacation

- Do You Find Today’s Newsletter Helpful? -

Yes Not sure No

You received this message because you are subscribed to Dark Reading's Daily newsletter. If a friend forwarded you this message, sign up here to get it in your inbox. Thoughts about this newsletter? Give us feedback.

Advertise With Us | Privacy Policy | Unsubscribe Copyright © 2025 TechTarget, Inc. or its subsidiaries. All rights reserved. Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US