A new phishing-as-a-service called 'Starkiller' uses real login pages and proxies to steal credentials, including MFA codes, making it harder to detect and shut down.
Why this matters: Defenders must rethink how they protect against phishing as advanced services like Starkiller bypass traditional defenses.
Krebs on Security
Kimwolf, a rapidly spreading IoT botnet, has infected over 2 million devices, forcing them to participate in DDoS attacks and relay malicious traffic, posing a serious threat to organizations.
Why this matters: Security teams must prioritize identifying and mitigating Kimwolf infections, as they could enable widespread data breaches and infrastructure disruptions.
Krebs on Security