Identity Attacks Surge, AI Phishing Gets Cheap, and Browser Extensions Turn Weapon

News

Malicious Browser Extensions Abuse Legitimate Install Policies to Hijack Accounts

Attackers are weaponizing browser extensions at scale; no zero-day needed, just trojanized updates pushed through legitimate policies. If your org allows extension installs via group policy or MDM, this is a wake-up call to audit those permissions yesterday.

Scattered Spider Tactics Evolve as Identity-Based Attacks Fuel Ransomware Pipeline

Ransomware groups keep doubling down on initial access via MFA fatigue and social engineering, not technical exploits. Defenders investing in phishing-resistant MFA (FIDO2, passkeys) are pulling ahead; everyone else is running on borrowed time.

Android Banking Trojan Anatsa Expands to 650+ Financial Apps with Overlay Attacks

Mobile malware is maturing fast, and Android banking trojans with overlay capabilities bypass most screen-level protections. Mobile threat defense can't be an afterthought anymore, especially for BYOD shops.

Tools

ProjectDiscovery Nuclei v3.4.0 Drops with Faster Fuzzing and Expanded Template Coverage

Nuclei continues to be the go-to scanner for offensive and defensive teams alike. The new release leans harder into community templates, making it trivial to test for the latest CVEs within hours of disclosure.

Analysis

CISA Pushes Software Bill of Materials Adoption as Open-Source Supply Chain Risk Rises

SBOM tooling is getting better, but most orgs still can't answer 'what's in our build pipeline' with confidence. This gap is exactly where the next supply chain breach will land.