ARTEX abuse expands as cybercriminals target financial sector

In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector using the agentic AI offensive framework ARTEX. The post ARTEX abuse expands as cybercriminals target financial sector appeared first on Microsoft Security Blog.

Threat Intelligence
Read the full article at Microsoft Security Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Help Net Security

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by Wakefield researcher Özgün Kültekin, was fixed in OpenSSH 10.6p2 on November 5. “An attacker who can reach your SSH port can log in without knowing any password. It takes one connection,…

Industrial Cyber

Bridewell reports 80% surge in global ransomware victims as manufacturing emerges as top target in Q3 2026

New data from Bridewell’s threat intelligence team recorded 2,889 publicly disclosed ransomware victims across 111 active ransomware and... The post Bridewell reports 80% surge in global ransomware victims as manufacturing emerges as top target in Q3 2026 appeared first on Industrial Cyber.

Help Net Security

Residential proxy traffic caught leaving the White House network

The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the world, Layer3 Intel found. In a blog post, the threat intelligence firm reported that its proxy enumeration pipeline exited through AS2650, the network registered to the Executive Office of the President, 236 times between October 5 and November 3.…