NewsThe Hacker News2026-10-02 17:33 UTCPublic Sector Finance SME

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deployment of a previously undocumented backdoor codenamed Antino. Cisco Talos is tracking the cluster

Other advisories

CVE-2026-55502none
Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials in github.com/cloudreve/Cloudreve
CVE-2026-65680none
microsoft onedrive: Improper Link Resolution Before File Access ('Link Following')
CVE-2026-65680none
microsoft onedrive: Improper Link Resolution Before File Access ('Link Following')
CVE-2026-65680none
Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
osv:CVE-2026-55502none
Cloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials
CVE-2026-55502none
Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials
CVE-2025-60722none
microsoft onedrive: Verzeichnisaufloesung (Path Traversal)
CVE-2025-60722medium
microsoft onedrive: Verzeichnisaufloesung (Path Traversal)

Other news entries

Newsbleepingcomputer2026-08-18
Microsoft confirms outage affecting search in Microsoft 365 apps
Newsthehackernews2026-07-17
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
Newsbleepingcomputer2026-06-15
New attack turned Microsoft 365 Copilot into 1-click data theft tool
Newsthehackernews2026-06-04
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
Newsgolem-security
Gesperrtes Konto: Doch kein endgültiger Datenverlust bei Microsoft
Newsgolem-security
Microsoft 365: Datenklau über Copilot mit nur einem Klick

Source: https://thehackernews.com/2026/10/antino-backdoor-uses-outlook-and.html

More on OneDrive