{"version":"https://jsonfeed.org/version/1","title":"Micro.blog - Edward Kiledjian","home_page_url":"https://micro.blog","feed_url":"https://micro.blog/posts/ekiledjian","_microblog":{"about":"https://micro.blog/about/api","id":"1555731","username":"ekiledjian","bio":"Global CISO and SVP of Cybersecurity, Privacy, Compliance and Resilience at OpenText. Writing about cybersecurity, AI, privacy and leadership from Ontario, Canada.","pronouns":"","is_following":false,"is_you":false,"following_count":1,"discover_count":0},"author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://avatars.micro.blog/avatars/2025/35/1555731.jpg"},"items":[{"id":"97374874","content_html":"

Passkey-themed phishing attacks lead to Microsoft 365 data theft

\n

Threat actors are using passkey-themed phishing to trick employees into providing access to Microsoft 365 accounts for data theft. These attackers employ social engineering and device-code authentication to capture credentials and session...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/11/passkeythemed-phishing-attacks-lead-to.html","date_published":"2026-09-11T19:06:46+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-11 19:06","date_timestamp":1789153606,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97374830","content_html":"

Novo Nordisk Data Breach Tied to Stolen GitHub Access Tokens

\n

The cyber extortion group FulcrumSec successfully breached Novo Nordisk by exploiting hardcoded credentials and GitHub access tokens found in client-side code. This data breach allowed the attackers to exfiltrate over one terabyte of information...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/11/novo-nordisk-data-breach-tied.html","date_published":"2026-09-11T19:05:35+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-11 19:05","date_timestamp":1789153535,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97374743","content_html":"

GitLab’s critical flaw is already drawing internet-wide probes | CyberScoop

\n

GitLab released emergency patches for two high-severity vulnerabilities, including a critical flaw that allows unauthenticated attackers to read files on self-managed servers. Security researchers are already observing internet-wide...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/11/gitlabs-critical-flaw-is-already.html","date_published":"2026-09-11T19:03:12+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-11 19:03","date_timestamp":1789153392,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97368345","content_html":"

Japan Digital Agency Reports Potential Leak of 246,000 Records After Cyberattack | Technology News

\n

The Japan Digital Agency reported a cyberattack on its Government Solution Service (GSS) that potentially exposed personal records of 246,000 workers and contractors through a VPN vulnerability. Authorities...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/11/japan-digital-agency-reports-potential.html","date_published":"2026-09-11T16:34:14+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-11 16:34","date_timestamp":1789144454,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97368287","content_html":"

Hack at MuPot exposes member data; South Korea probes breach - CHOSUNBIZ

\n

The MuPot platform confirmed a data breach where unauthorized external access resulted in the potential theft of member names, email addresses, and phone numbers. South Korean authorities are currently investigating the incident, while...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/11/hack-at-mupot-exposes-member.html","date_published":"2026-09-11T16:32:00+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-11 16:32","date_timestamp":1789144320,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97368209","content_html":"

IDScan confirms breach after hackers offer 153 million driver’s license scans for sale | The Record from Recorded Future News

\n

The identity verification firm IDScan confirmed a data breach after hackers offered 153 million driver’s license scans for sale on a dark web marketplace. The unauthorized access...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/11/idscan-confirms-breach-after-hackers.html","date_published":"2026-09-11T16:30:48+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-11 16:30","date_timestamp":1789144248,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97306184","content_html":"

Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers

\n

Three threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/10/cisco-fmc-flaws-exploited-by.html","date_published":"2026-09-10T17:05:35+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 17:05","date_timestamp":1789059935,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97305765","content_html":"

BlueMoon exploit kit turns Chrome and Windows flaws into attacks | Malwarebytes

\n

The BlueMoon exploit kit leverages Chrome and Windows vulnerabilities to execute attacks, demonstrating that delaying security updates creates a dangerous window for cybercriminals to compromise systems. To stay safe, users...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/10/bluemoon-exploit-kit-turns-chrome.html","date_published":"2026-09-10T17:03:51+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 17:03","date_timestamp":1789059831,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97305634","content_html":"

AI-powered attack exploited PaperCut flaws to hack 395 organizations

\n

An AI-powered attack exploited PaperCut vulnerabilities to compromise 395 organizations across 48 countries by rapidly automating the development and deployment of malicious exploits. The campaign utilized AI agents to harvest credentials...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/10/aipowered-attack-exploited-papercut-flaws.html","date_published":"2026-09-10T17:03:00+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 17:03","date_timestamp":1789059780,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97305345","content_html":"

Cybersecurity M&A Roundup: 33 Deals Announced in August 2026 - SecurityWeek

\n

In August 2026, the industry saw 33 cybersecurity-related merger and acquisition deals announced. Notable transactions included Visa’s acquisition of BioCatch for $2.4 billion and Munich Re’s purchase of At-Bay for $575 million.

\n","summary":"","url":"https://threatintel.cc/2026/09/10/cybersecurity-ma-roundup-deals-announced.html","date_published":"2026-09-10T16:57:37+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 16:57","date_timestamp":1789059457,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97305295","content_html":"

Houthis seize key Red Sea city with Iranian support, threatening global shipping chokepoint

\n

The Houthi forces have captured the strategic port city of Mokha with Iranian support, granting them significant control over the Bab al-Mandeb Strait. This territorial gain threatens a vital global shipping...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/10/houthis-seize-key-red-sea.html","date_published":"2026-09-10T16:56:18+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 16:56","date_timestamp":1789059378,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97305247","content_html":"

Liquid Network resumes block production after $320M exploit caused 95% reserve drawdown

\n

The Liquid Network has resumed block production following a $320M exploit that drained 95% of its Bitcoin reserves through an Elements software vulnerability. While white-hat hackers returned most of the stolen funds,...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/10/liquid-network-resumes-block-production.html","date_published":"2026-09-10T16:55:24+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 16:55","date_timestamp":1789059324,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97304799","content_html":"

Trezor’s summer of hacks continues with Brevo email breach

\n

Trezor’s third-party email provider Brevo was breached, exposing the email addresses of 347,000 subscribers to phishing attempts. While personal wallet data remains secure, the company is investigating the incident and reviewing its vendor security...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/10/trezors-summer-of-hacks-continues.html","date_published":"2026-09-10T16:52:28+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 16:52","date_timestamp":1789059148,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97304800","content_html":"

Twitch data leak claim: 40,000 streamers allegedly exposed | Cybernews

\n

The Cybernews report on the Twitch data leak indicates that an attacker is selling information on 40,000 streamers, though the data appears to be scraped rather than sourced from a direct platform breach. Because the dataset may include...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/10/twitch-data-leak-claim-streamers.html","date_published":"2026-09-10T16:51:08+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-10 16:51","date_timestamp":1789059068,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97237005","content_html":"

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

\n

Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/active-exploitation-of-cisco-secure.html","date_published":"2026-09-09T16:58:57+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:58","date_timestamp":1788973137,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236772","content_html":"

Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories - SecurityWeek

\n

Major chipmakers AMD, Arm, and Nvidia have released new security advisories to address various vulnerabilities in their hardware and software products. These updates mitigate risks including system crashes, unauthorized...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/chipmaker-patch-tuesday-nvidia-amd.html","date_published":"2026-09-09T16:55:06+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:55","date_timestamp":1788972906,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236696","content_html":"

Android’s September 2026 Updates Patch 180 Vulnerabilities - SecurityWeek

\n

Google’s September 2026 Android security updates resolve 180 vulnerabilities, including a critical system flaw that could enable remote code execution. These patches address multiple security defects across the platform to protect...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/androids-september-updates-patch-vulnerabilities.html","date_published":"2026-09-09T16:53:37+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:53","date_timestamp":1788972817,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236517","content_html":"

Veradigm Confirms Patient Data Exposed in Third-party Data Breach

\n

Veradigm confirmed that a third-party vendor breach resulted in the exposure of sensitive patient data, including Social Security numbers, via a compromised API. The company clarified that no clinical or medical information was accessed and...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/veradigm-confirms-patient-data-exposed.html","date_published":"2026-09-09T16:50:45+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:50","date_timestamp":1788972645,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236365","content_html":"

Large KFC franchise operator in South Africa hit by 536GB data breach – MyBroadband

\n

The Rohloff Group, a major South African KFC franchise operator, has confirmed a cybersecurity incident after the INC Ransom gang claimed to have stolen 536GB of employee and company data. The company stated the ransomware...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/large-kfc-franchise-operator-in.html","date_published":"2026-09-09T16:46:57+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:46","date_timestamp":1788972417,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236351","content_html":"

South Korean Payment Gateways Hit by Mass Credit Card Data Breach; Suspected Chinese Hacker Alerted Regulators First — BigGo Finance

\n

South Korea’s Financial Supervisory Service has launched inspections of Toss Payments and Coem Payments following a mass credit card data breach involving tens of thousands of...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/south-korean-payment-gateways-hit.html","date_published":"2026-09-09T16:45:55+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:45","date_timestamp":1788972355,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236274","content_html":"

220 million traveler records exposed in Vietnam-linked APIS leak

\n

An Advance Passenger Information System database linked to a Vietnamese organization accidentally exposed over 220 million traveler and crew records due to security misconfigurations. The leak, which was secured in June 2026, included sensitive...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/million-traveler-records-exposed-in.html","date_published":"2026-09-09T16:45:00+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:45","date_timestamp":1788972300,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236275","content_html":"

ShinyHunters claims Florida DMV breach, puts data on the clock | CSO Online

\n

The extortion group ShinyHunters claims to have breached the Florida Department of Highway Safety and Motor Vehicles' DAVID database, threatening to leak over 200,000 records if their demands are not met by September 11. This...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/shinyhunters-claims-florida-dmv-breach.html","date_published":"2026-09-09T16:43:38+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:43","date_timestamp":1788972218,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"97236262","content_html":"

Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak

\n

A database containing 32.8 million user records from Condé Nast is being offered for sale on a cybercrime forum for $15,000. The exposed personal information, which does not include passwords, increases the risk of targeted phishing and...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/09/cond-nast-data-of-million.html","date_published":"2026-09-09T16:42:59+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-09 16:42","date_timestamp":1788972179,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"96840635","content_html":"

Hackers Target US and EU Firms With Microsoft 365 Session Hijacking and RMM Abuse

\n

Hackers are exploiting Microsoft 365 sessions, RMM software, and phishing-as-a-service kits like Mirage2FA to hijack corporate accounts across the US and Europe. To mitigate these threats, organizations must revoke active...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/02/hackers-target-us-and-eu.html","date_published":"2026-09-02T18:19:13+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-02 18:19","date_timestamp":1788373153,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"96840583","content_html":"

GitSpawn Flaws Let Malicious Repositories Execute Code in Claude Code, Codex, Cursor and Grok

\n

GitSpawn vulnerabilities allow malicious repositories to silently execute arbitrary code on a developer’s machine by exploiting background git commands that trigger unauthorized configuration hooks. To prevent this,...

threatintel.cc","summary":"","url":"https://threatintel.cc/2026/09/02/gitspawn-flaws-let-malicious-repositories.html","date_published":"2026-09-02T18:17:10+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2026-09-02 18:17","date_timestamp":1788373030,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":false,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"74890839","content_html":"

@Walker I agree burnout is a real problem in infosec teams. I know many CISOs that left cyber and became CIOs. They said it is much easier

\n","url":"https://micro.blog/ekiledjian/74890839","date_published":"2025-10-02T23:55:35+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2025-10-02 23:55","date_timestamp":1759449335,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"edit_url":null,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"61673138","content_html":"

@nicholasdomanico you’re probably not wrong

\n","url":"https://micro.blog/ekiledjian/61673138","date_published":"2025-04-07T13:51:42+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2025-04-07 13:51","date_timestamp":1744033902,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"edit_url":null,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"53083222","content_html":"

@PJ_Evans I am not sure it is the selling sofware they are targeting. Think of what this would do to global piracy?

\n","url":"https://micro.blog/ekiledjian/53083222","date_published":"2024-12-23T19:23:19+00:00","author":{"name":"Edward Kiledjian","url":"http://www.kiledjian.com","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F35%2F1555731.jpg","_microblog":{"username":"ekiledjian"}},"_microblog":{"date_relative":"2024-12-23 19:23","date_timestamp":1734981799,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"edit_url":null,"is_conversation":true,"is_linkpost":false,"is_mention":true}}]}