SesameOp
TRENDING TOPICS NOV 04, 2025 SesameOp: Backdoor Leveraging OpenAI API for Covert Command-and-Control Microsoft’s Incident Response team identified a stealthy backdoor, labeled SesameOp, that repurposes the OpenAI Assistants API as an off-the-shelf command-and-control channel. The implant comprises an obfuscated[.]NET loader injected into developer tooling via AppDomainManager manipulation, and
Qilin
TRENDING TOPICS OCT 16, 2025 Qilin Ransomware: Bulletproof Hosting Fuels High-Impact RaaS Campaigns Qilin has matured from a mid-2022 affiliate operation into a sophisticated ransomware-as-a-service platform that outfits affiliates with a polished web panel, phishing toolkits, RMM exploits, and double-extortion workflows. Its developers maintain the ransomware codebase in Golang and
Windows UI Automation
TRENDING TOPICS JULY 23, 2025 Update: Coyote Banking Trojan Becomes First to Exploit Windows UI Automation for Credential Theft A newly identified variant of the Coyote banking trojan is the first known malware to exploit Microsoft’s UI Automation (UIA) framework for real-world credential theft, marking a major shift in
nOAuth
TRENDING TOPICS JUNE 26, 2025 Update: nOAuth Vulnerability Still Threatens Microsoft Entra SaaS Apps and Broader Identity Systems Despite being publicly disclosed in mid-2023, the nOAuth vulnerability continues to affect a significant portion of Microsoft Entra-integrated SaaS applications. A recent review by Semperis found that 9% of the 104 applications