Current notices on active threats, with prioritised mitigations for defenders.
Ongoing campaigns host credential-harvesting pages on legitimate file-sharing platforms to bypass domain-reputation filtering. Defences: user reporting, URL inspection at click time and conditional access for high-risk sign-ins.
Attacks continue to exploit internet-facing edge devices as initial access vectors. Priority actions: inventory external-facing systems, apply vendor patches and monitor for post-exploitation behaviour on network appliances.
Automated credential-stuffing activity is increasing against consumer login endpoints. Recommended controls: rate limiting, breached-credential checks and phishing-resistant authentication for high-value accounts.
Our team can assess how these recommendations apply to your environment and sequence the work.