A cyber threat actor believed to align with Turkish government interests has been observed exploiting user accounts that have not applied fixes to a vulnerability (CVE-2025-27920) in Output Messenger, a multiplatform chat solution. The campaign was detected by Microsoft Threat Intelligence and has been ongoing since at least April 2024. The threat actor, tracked as Marbled Dust by Microsoft, is believed to be a cyber-espionage group whose interests align with Turkey. In a May 12…

5Critical 66Important 0Moderate 0Low Microsoft addresses 71 CVEs including seven zero-days, five of which were exploited in the wild. Microsoft patched 71 CVEs in its May 2025 Patch Tuesday release, with five rated critical and 66 rated as important. This month’s update includes patches for: .NET, Visual Studio, and Build Tools for Visual Studio Active Directory Certificate Services (AD CS) Azure Azure Automation Azure DevOps Azure File Sync Azure Storage Resource Provider Microsoft Brokering File…

A new cyber espionage campaign targeting Ukrainian government entities has been uncovered by cybersecurity researchers. According to Proofpoint, the campaign, attributed to North Korean state-aligned threat actor TA406, includes phishing emails designed to harvest credentials and deliver sophisticated malware aimed at long-term intelligence collection. Strategic Focus and Delivery Methods TA406, also tracked by other security firms as Opal Sleet and Konni, has shifted focus from Russia to Ukraine amid the ongoing war. The group’s operations…

The US Cybersecurity and Infrastructure Security Agency (CISA) has announced it will no longer post standard cybersecurity update announcements to its Cybersecurity Alerts & Advisories webpage. Instead, these updates will now be distributed solely through CISA’s email subscription service and social media platforms, including X (formerly Twitter) under the CISACyber handle. Under the new approach, CISA’s public-facing webpage will focus exclusively on time-sensitive alerts related to major cyber activity or emerging threats. The agency says…