Russian hackers have infiltrated the email accounts of United Kingdom government officials and overseas Foreign Office staff in a major national security breach, according to a report by The Telegraph on July 5. The sophisticated cyber assault, nicknamed “FortiBleed” by researchers, compromised more than 80,000 firewalls manufactured by cybersecurity firm Fortinet. The Telegraph reported that attackers exploited an internal system vulnerability, utilizing previously stolen data to bypass…

A new phishing-as-a-service (PhaaS) platform dubbed “ARToken” appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. Cisco Talos researchers discovered the platform while investigating phishing infrastructure used in an incident response engagement and identified a React-based management panel called “ARToken Panel” that exposed…