.NET

Researchers identified a critical vulnerability named CosmosEscape that allowed for unauthorized access to Azure Cosmos DB accounts. By bypassing the Gremlin API sandbox, attackers could have leveraged a platform-wide master key to compromise both customer and Microsoft internal databases.

Cybersecurity researchers from Microsoft and Trend Micro have uncovered sophisticated phishing campaigns targeting hospitality organizations in Europe and Asia. These attacks leverage malicious archives to deploy persistent malware like Node.js implants and blockchain-based RATs to maintain long-term access.

Attackers compromised legitimate DAEMON Tools installers to distribute trojanized, digitally signed binaries that execute malicious code upon system startup. The campaign utilizes an initial information collector to profile victims before deploying advanced payloads like the QUIC RAT for targeted exploitation.