September 30, 2026
- Star Blizzard has shifted from narrow spear-phishing to large-scale multi-stage campaigns against 100+ organizations, using compromised legitimate websites and a new delivery technique Microsoft calls RedFlick, paired with the CosmicPulse backdoor (Microsoft, The Hacker News). · Threat Activity
in Mandiant Names the NetScaler Post-Exploitation Kit as Patch Rates Stay Under 10%