New SynkLoader malware pushed in Microsoft Teams phishing campaign

BleepingComputer security feed covering active exploitation of critical vulnerabilities, phishing and malware campaigns, cloud credential exposure, software supply-chain compromise, data breaches, and high-impact product security issues. Key risks include SynkLoader distributed through Microsoft Teams phishing, exposed active AWS keys enabling account takeover, actively exploited TrueConf Server and MLflow flaws, a maximum-severity Entra ID vulnerability, FTP banner abuse delivering RATs, a poisoned Rust crate, and critical Elementor Pro remote code execution.