MUST READ

Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel

 | 

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Agents Attempt SQL Injection While Searching Government Data

 | 

Investigators trace an AI agent 's path from research task to reconnaissance

 | 

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

 | 

Operation KillSwitch: Police Dismantle KillSec Ransomware Group

 | 

Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first

 | 

Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950

 | 

U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog

 | 

AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds

 | 

WatchGuard fixes critical Fireware OS flaw allowing remote code execution

 | 

Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments

 | 

Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT

 | 

U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog

 | 

WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign

 | 

Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches

 | 

Three Million Affected in Pentagon Personnel Agency Data Breach

 | 

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

 | 

24-Year-Old Arrested in Dutch Investigation Into ShinyHunters

 | 

GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch

 | 

Antino backdoor

Pierluigi Paganini October 03, 2026
Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel

Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian governments. Cisco Talos has been tracking a cluster of espionage activity since September 2025 that it calls UAT-11587, and by July 2026 the group had hit at least 16 government and policy organizations across eight […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel

APT / October 03, 2026

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

Security / October 02, 2026

AI Agents Attempt SQL Injection While Searching Government Data

Artificial Intelligence / October 02, 2026

Investigators trace an AI agent 's path from research task to reconnaissance

Artificial Intelligence / October 02, 2026

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

Security / October 02, 2026