AI Security Institute Advocates Security Best Practices After Mythos Test

Weekly Infosecurity Magazine roundup highlighting multiple high-risk threats and active incidents: attackers abusing Microsoft 365 mailbox rules for stealthy post-compromise persistence and exfiltration; the Mirax Android banking trojan (MaaS) converting devices into residential proxies; and continued large-scale phishing and crypto-fraud operations (W3LL, Operation Atlantic). Several exploited or critical flaws prompted emergency updates — notable examples include a Ninja Forms unauthenticated file-upload RCE (update to 3.3.27) and a FortiClient EMS zero‑day patch — alongside novel attacktech