Cyber Attacks
ESET: Medicare Open Enrollment phishing harvests health data for identity theft
ESET reports fraudsters exploit the October 15 to December 7 enrollment window to trick beneficiaries into sharing sensitive health and financial data.
RedTeam Tribune Threat Desk
Cyber Attacks
Threat Intelligence
TAG-193 Uses Compromised Government Accounts for Central Asian Espionage
The threat actor leverages trusted sender identities and public code hosts to infiltrate diplomatic and resource agencies across the Commonwealth of Independent States.
Cyber Attacks
USB Audio Spy in OpenAI Exec Room: Engineer Charged, No Model Weight or Source Code Data Breach Reported
An engineer is charged with intercepting oral communications after hiding a recording device in an executive conference room at the AI company.
Cyber Attacks
AI Lowers Barriers for Chinese Scam Operations Expanding Beyond Asia
Automated tools and cheap hardware enable fraudsters to operate fake investment schemes from outside traditional Asian compounds.
Cyber Attacks
Attackers Abuse Microsoft Power BI Dashboards to Distribute ScreenConnect RMM
Huntress researchers found a campaign using public Power BI dashboards to trick users into downloading remote management software.
Threat Intelligence
DNS Tunneling: 40 Billion Records From One Domain Signal Iranian Infrastructure Expansion
A single domain triggered 40 billion DNS records during a military conflict, signaling massive infrastructure expansion for suspected Iranian operators.
Cyber Attacks
Compromised ccTLD Registries Allowed Unauthorized Google Certificate Issuance
Attackers hijacked .gh, .sl, and .as registries to steal HTTPS certificates for Google domains, though Google's core systems remained secure.