Researchers Infiltrate Microsoft Tech Support Scam Operation

Dark Reading feed covering active exploitation of edge-device vulnerabilities, phishing and scam infrastructure, ransomware and extortion, spyware delivered through advertising, cloud and identity compromise, AI-agent security risks, cyber-espionage, influence operations, and OT/ICS weaknesses. Notable items include a critical SonicWall SMA SSRF flaw under attack, an Ivanti ICS authentication-bypass/RCE zero-day, Anthropic Claude Code credential theft, AWS Bedrock AgentCore compromise, and large-scale phishing and Microsoft impersonation campaigns.