Ghostwriter’s March 2026 Ukraine attacks use PDF lures and geofencing to deploy Cobalt Strike on government targets.
Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.
A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by ...