'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks

Dark Reading feed covering active enterprise attack campaigns, malware and phishing services, exploited vulnerabilities, nation-state operations, OT risks, and emerging security challenges involving agentic AI. Key items include a PowerShell-based ClickFix campaign using reverse tunnels, backdoored white-label ZBT routers, Russian phishing of EU officials via messaging apps, a Dark Caracal modular malware framework, Microsoft 365 session theft through AitM phishing, an exploited Zimbra takeover flaw (CVE-2026-73570), and vulnerabilities affecting AI model infrastructure and industrial systems.