project
Enterprise collaboration and document platform whose authentication weakness is being exploited in the wild.
No evidence-backed relationships are recorded.
Arctic Wolf says the cluster it tracks as PREY-0058 deploys no malware at all. A call from fake IT leads to a proxied login page, and the stolen session token comes back from inside the victim's own ASN.
Perspective Coverage
3 publishersReality
Microsoft has tracked intrusions since May in which callers posing as IT told employees a passkey update was due, then steered them to a phishing page or a device-code prompt. The enrollment step is where the chain starts.
Reality
Syskit's September 10 governance report has 76% of UK and US organizations running or piloting Copilot on Microsoft 365 data and 43% reviewing permissions and oversharing before switching it on. The findings are self-reported.
Reality
Parallels Desktop 27 puts a Metal-based driver behind Windows VMs, but the numbers it quotes are scoped to M3 and M4 Macs. The compatibility win is real; the throughput win is conditional.
Reality
Agent 365 pushes agents into the same registry, access policies and e-discovery used for staff. That moves the governance work onto teams you already fund.
Reality
CVE-2026-55040 was patched in July. Rapid7 published the technical details and a script on August 11, and Defused says its honeypots logged exploitation on August 12.
Reality