Attackers abused ConnectWise application identities to enter Microsoft 365 tenants, where disabling the original apps may not remove added access paths.
An exploited Atlassian Data Center flaw reads known files without authentication, exposing configuration secrets that can become administrative access.
A BeyondTrust Remote Support zero-day gave an espionage actor an appliance foothold, persistent root access, and a path to managed endpoints.
Citizen Lab traced Candiru spyware infections at Al Jazeera through targeted ads, exposing ad auctions as a precision zero-click delivery layer.