Attackers are using social engineering and spoofed domains to pose as known vendors, tricking employees into updating bank account details or initiating fraudulent payments.

A zero-day vulnerability in Fortinet’s FortiOS SSL-VPN allows unauthenticated remote code execution. Active exploitation has been confirmed in targeted attacks against small business networks using outdated firmware.

A widespread phishing campaign is impersonating OneDrive file sharing notifications to harvest employee credentials and bypass MFA. The fake links lead to cloned Microsoft login pages with active credential-stealing scripts.