NewsMicrosoft Threat Intelligence
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
More on impersonation
Other advisories
- Not ratedosv:CVE-2026-119148Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint
- Not ratedosv:CVE-2026-116184OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket
- Not ratedosv:CVE-2026-77937Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
- HighCVE-2026-1078110xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser in github.com/0xJacky/Nginx-UI
- Not ratedosv:CVE-2026-109553Gitea SSH certificate principal impersonation of other users
- Not ratedosv:CVE-2026-109374ZITADEL 3.0.0 before 4.19.2 Privilege Escalation via OIDC Token Exchange Impersonation
- HighCVE-2026-1078110xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
- HighCVE-2026-1078110xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
Other news entries
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwareNewsThe Hacker News
- Microsoft Teams to get support for third-party deepfake detection toolsNewsBleepingComputer
- Attackers hijacked top-level domains, minted fake security certs for Google and other orgsNewsThe Register — Security
- FBI: Fake cop and government impersonation scams cost victims $1.6BNewsThe Register — Security
- OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud SchemesNewsThe Hacker News
- 3 Ways AI Powers Service Desk Attacks and How to Prevent ThemNewsBleepingComputer
- Webinar: Why business email compromise attacks keep succeedingEventBleepingComputer
- Silent Ransom Group Hits US Law Firms in Escalating Extortion AttacksNewsDark Reading
ID