FlutterShell is linked to previous malvertising campaigns including TamperedChef.
Laura French
The approximately 150-day espionage campaign incrementally exfiltrated emails to cloud services.
Project Glasswing partners discovered more than 10,000 vulnerabilities in its first month.
The company was criticized after a blog posted that suggested law enforcement involvement.
Experts say attempting to replace deterministic tools and human analysts with AI could cost companies more.
The attack leverages a polyglot file, heavy obfuscation and fileless execution to evade detection.
Single-turn attack success rates are not a reliable benchmark for model safety, Cisco concludes.
Career-themed phishing lures targeted employees of US domestic airlines during Operation Epic Fury.
CISA seeks to engage the wider community to more quickly identify active exploitation.
ADAMnetworks estimates about 42% of domains could be abused using the technique.