SecurityPreview Trusts the Payload
The LAUNDRY BEAR Zimbra campaign reveals that MFA protects the authentication step but not the authenticated session, and email clients are a reliable path around that distinction.
Nation-State
Trusted Vendor, Compromised Namespace: Miasma Escalates Supply Chain Risk While AI Cements Its Role in Ransomware Development
The Mini Shai-Hulud worm now operates inside Red Hat's official npm namespace, proving that vendor-maintained packages are viable supply chain targets; simultaneously, the first confirmed AI-assisted ransomware toolchain documents a qualitative shift in what moderately skilled operators can build.