microsoft 365

Microsoft assesses that Storm-0940 used the open-source ARTEX agentic pentest framework after the ConnectWise Cloud Backup compromise, with privileged access in under three hours in multiple instances. Most targeting failed.

Varonis uncovered Dolphin X, a RAT with an AI behavioral profiler that scores infected victims by value. ZeroBEC exposed Forg365, a phishing-as-a-service platform with AI lure generation targeting Microsoft 365.