Threats Vulnerabilities

Critical PHP Vulnerabilities Require Immediate Action

Critical PHP Vulnerabilities Require Immediate Action

October 22, 2026

Pratik Surendra Bhosale

Microsoft 365 Copilot prompt injection and data exfiltration attack flow

What Is Microsoft 365 Copilot Prompt Injection and How Can It Lead to Data Exfiltration?

October 16, 2026

Pratik Surendra Bhosale

Compromised vendor email delivering a malicious PDF in a Microsoft 365 credential phishing attack

How Can a Trusted Vendor Email Lead to Microsoft 365 Credential Phishing?

October 1, 2026

Rahul Sarkar

Cybersecurity analysts monitoring Barracuda ransomware, data theft, and critical infrastructure risk

Barracuda Ransomware Group: Who It Targets, How It Operates, and How SOC Teams Should Respond

September 28, 2026

Debojyoti Goswami

BigBear 2.0 AiTM phishing proxy intercepting a Microsoft 365 authenticated session cookie after the user completes MFA

BigBear 2.0 AiTM Phishing: How Microsoft 365 Sessions Are Hijacked After MFA

September 25, 2026

Gunupuru Siva Prasad

WeTransfer phishing attack using an HTML file to redirect users to a fake Microsoft 365 login page

How Trusted WeTransfer Links Are Used in Credential-Harvesting Attacks

September 21, 2026

Shweta Shelke

Microsoft Teams help desk impersonation attack progressing from Quick Assist access to malware installation, lateral movement, and antivirus tampering

How Attackers Move Laterally from Microsoft Teams to Domain-Wide Antivirus Tampering

September 11, 2026

Janak Khairmode

LegacyHive CVE-2026-62832 Windows privilege escalation vulnerability affecting user registry hives

What Is the LegacyHive Windows Zero-Day Vulnerability, and How Can Organizations Reduce the Risk?

September 4, 2026

Gunupuru Siva Prasad

Trusted third-party phishing email leading to Microsoft 365 credential theft

How Do Phishing Attacks Use Trusted Third-Party Accounts?

August 27, 2026

Debojyoti Goswami

Infostealer attack chain showing session cookie theft, MFA bypass, access broker sale, and ransomware deployment

How Are Infostealers Bypassing MFA and Enabling Ransomware Attacks?

August 17, 2026

Sai Rishi Kumar Bommakanti

BadUSB attack targeting an OT engineering workstation through a compromised USB device

What Is a BadUSB Attack, and How Does CVE-2025-4371 Affect OT and ICS Security?

August 6, 2026

Sai Rishi Kumar Bommakanti

Attack chain showing how fake ManageEngine OpManager downloads use SEO poisoning to deliver BumbleBee malware, establish persistence, exfiltrate data, and deploy Akira ransomware

How Do Fake ManageEngine OpManager Downloads Deliver BumbleBee Malware and Akira Ransomware

July 30, 2026

Gunupuru Siva Prasad

Forg365 phishing attack targeting Microsoft 365 through device-code authentication and session token theft

Forg365: A New Phishing-as-a-Service Platform Targeting Microsoft 365 Accounts

July 24, 2026

Gunupuru Siva Prasad

Business Email Compromise attack using a spoofed domain targeting vendor payments detected and blocked by ProArch SOC

How ProArch SOC Stopped a Spoofed Domain BEC Attack Targeting Vendor Payments

July 23, 2026

Rahul Sarkar

CVE-2026-47291 Windows HTTP.sys remote code execution vulnerability affecting IIS and Windows Server environments

CVE-2026-47291: Critical Windows HTTP.sys Vulnerability Enables Remote Code Execution

July 17, 2026

Gunupuru Siva Prasad

Microsoft Teams vishing attack delivering EtherRAT malware through fake IT support calls and remote access tools

Malware Microsoft Teams Vishing Attack: How Fake IT Support Calls Are Delivering EtherRAT Malware

July 16, 2026

Gunupuru Siva Prasad

TonRAT phishing campaign attack chain abusing Calendly notifications and Google redirects to deliver Node.js malware

TonRAT Phishing Campaign Uses Calendly and Google Redirects to Deliver Malware

July 8, 2026

Nandini G Dyavanagowdra

Check Point VPN Authentication Bypass (CVE-2026-50751)

Check Point VPN Authentication Bypass (CVE-2026-50751) – Active Exploitation Confirmed

July 3, 2026

Sai Rishi Kumar Bommakanti

ClickFix attack abusing Windows Run command and PowerShell for initial access

ClickFix Attacks: How Attackers Abuse Windows Run Command for Initial Access via Social Engineering

July 2, 2026

Shweta Shelke

Azure cloud attack path diagram in Microsoft Defender for Cloud.

Cloud Attack Paths in Azure: Risks and Fixes

July 1, 2026

Rahul Dogra

Microsoft 365 Admin Consent Risks: What ProArch SOC Is Seeing in 2026

Microsoft 365 Admin Consent Risks: What ProArch SOC Is Seeing in 2026

June 29, 2026

Rahul Dogra

Why Are Invoice-Themed Emails Coming from a NetSuite Sender Address?

Why Are Invoice-Themed Emails Coming from a NetSuite Sender Address?

June 29, 2026

Debojyoti Goswami

Dual-payload malware diagram showing CloverPlus adware and Gh0st RAT deployment using a Windows loader and rundll32 execution

What Is a Dual-Payload Malware Campaign? Gh0st RAT and Adware Explained

May 25, 2026

Gunupuru Siva Prasad

Microsoft 365 Direct Send phishing attack using spoofed internal emails

How Attackers Abuse Microsoft 365 Direct Send to Deliver Phishing Emails

May 12, 2026

Rahul Dogra

Fake PDF tools delivering malware that steals credentials and session tokens

PDF-Inspired Malware Campaigns: From Advertisements to Information-Stealing Attacks

April 22, 2026

Janak Khairmode

How Attackers Use AI in Cyber Attacks, Who Should Care and Why Does it Matter

How Attackers Use AI in Cyber Attacks, Who Should Care and Why Does it Matter

April 21, 2026

Pratik Surendra Bhosale

Microsoft Defender zero-day vulnerabilities BlueHammer RedSun UnDefend April 2026 cybersecurity alert

Security Advisory: Microsoft Defender Zero-Day Vulnerabilities (BlueHammer, RedSun & UnDefend) – April 2026

April 20, 2026

Ashwin Ram Mohan Notori

Iranian cyber attack targeting PLC systems in critical infrastructure OT environment

The Active Threat: Critical Infrastructure is Under Attack by Iranian Threat Actors

April 14, 2026

Debojyoti Goswami

LiteLLM supply chain attack showing compromised Python package and credential theft risk in AI ecosystem

LiteLLM Supply Chain Attack Exposes AI Ecosystem to Mass Credential Theft

April 10, 2026

Surya Mahendra Babu Digamarthi

Browser extension session hijacking attack in Microsoft 365 showing MFA bypass and session token theft

Browser Extension Session Hijacking Risks for Microsoft 365 and SaaS Apps

April 1, 2026

Rahul Dogra

AI malware using Copilot and Grok as covert command-and-control channels illustration

Threat Alert: Malware Using AI Assistants (Copilot, Grok) as Covert C2 Channels

March 20, 2026

Gunupuru Siva Prasad

calendar invite phishing attack using .ics file and QR code to bypass MFA

How Attackers are Using Calendar to Launch QR-based AiTM Phishing Attacks

March 19, 2026

Janak Khairmode

Nation-state cyberattacks targeting businesses in 2026 and cybersecurity protection strategies

Nation-State Cyberattacks in 2026: What Businesses Must Do to Stay Protected

March 19, 2026

Janak Khairmode

OpenClaw vulnerability CVE-2026-25253 one-click RCE attack explained

OpenClaw One-Click RCE Vulnerability (CVE-2026-25253): What Happened and Why It Matters

March 18, 2026

Pratik Surendra Bhosale

Stryker cyberattack 2026 destructive wiper attack impacting global enterprise systems

Geopolitically Motivated Cyber Operations Against the Healthcare Technology Industry: Lessons from the Stryker Incident

March 13, 2026

Pratik Surendra Bhosale

Trojanized ScreenConnect remote access attack delivered through government-themed phishing MSI installer

Trojanized ScreenConnect Enables Stealth Remote Access via Government-Themed Phishing

March 11, 2026

Rahul Dogra

AI powered CyberStrikeAI attack compromising Fortinet FortiGate firewalls worldwide

AI‑Assisted FortiGate Breach: CyberStrikeAI Linked to 600+ Compromised Firewalls

March 9, 2026

Gunupuru Siva Prasad

Enterprise cybersecurity monitoring dashboard detecting cryptomining malware activity

How Digital Currency Mining is a Growing Silent Threat in 2026

March 5, 2026

Shweta Shelke

AWS data center disruption in Middle East affecting global cloud infrastructure, capacity, and disaster recovery operations

Security Advisory: AWS Middle East Conflict – Impact Assessment

March 5, 2026

Pratik Surendra Bhosale

ADP payroll phishing email scam targeting employees with fake login page

Think It’s from Payroll? Think Again: How Attackers Are Exploiting Payroll Providers like ADP

March 4, 2026

Rahul Dogra

QR code phishing attack bypassing Microsoft 365 MFA using adversary-in-the-middle AiTM technique

Why MFA Isn’t Always Enough: How a QR Code Phishing Attack Bypassed Microsoft 365 Security

March 4, 2026

Janak Khairmode

Power BI Notifications Used for Phishing: Risks and User Awareness

Power BI Notifications as a Phishing Tool: Risks, Signs, and Awareness

February 13, 2026

Debojyoti Goswami

BridgePay Ransomware Attack: Prevent Payment Outages and Disruption

BridgePay Ransomware Attack: What the Nationwide Payment Outage Reveals

February 12, 2026

Gunupuru Siva Prasad

Cyberattack on Poland power grid impacting OT and ICS systems

Poland Power Grid Cyberattack: OT Security Lessons for Critical Infrastructure

February 2, 2026

Debojyoti Goswami

Defending against double-extortion ransomware with proactive threat detection

Defending Against Ransomware: Key Insights and Actionable Recommendations

January 23, 2026

Harsha Vardhan Kurati

Phishing attack using a lookalike domain and malicious PDF to harvest credentials

Phishing Attack via Lookalike Subdomain and Malicious PDF: Credential Harvesting Campaign Targeting Vendor Relationships

January 12, 2026

Ashwin Ram Mohan Notori

Qilin ransomware attack targeting enterprise networks using double extortion techniques

Qilin Ransomware: Expanding Enterprise-Grade Extortion Operations

January 5, 2026

Surya Mahendra Babu Digamarthi

Honeypots and defensive deception for early threat detection in SOC environments

Early Threat Detection with Honeypots and Defensive Deception

December 26, 2025

Rahul Dogra

Scattered Spider cyberattack lifecycle showing social engineering, MFA bypass, and ransomware deployment

Scattered Spider Cyberattacks: Anatomy, Impact, and Defense Strategies

December 18, 2025

Pratik Surendra Bhosale

Fortinet FortiWeb CVE-2025-64446 exploit alert showing critical authentication bypass risk for enterprises

Fortinet FortiWeb Exploit (CVE-2025-64446) Allows Unauthenticated Admin Access

December 8, 2025

Gunupuru Siva Prasad

How attackers bypass Microsoft Defender using Teams guest access

The Hidden Handshake: Microsoft Teams Guest Access Exposes a New Cross-Tenant Attack Path

December 4, 2025

Kamaljeet Kaur

Security analyst reviewing XSS exploitation and malicious IP activity dashboard

XSS Exploitation Leads to Domain Hosting on Malicious IP

December 1, 2025

Debojyoti Goswami

Storm-2657 payroll hijacking attack flow diagram showing AiTM phishing and Workday manipulation steps

Storm-2657: Payroll Hijacking Campaign Targeting U.S. Companies (2025 Threat Analysis)

November 27, 2025

Debojyoti Goswami

Critical WSUS remote code execution vulnerability CVE-2025-59287 security alert

Critical Remote Code Execution Vulnerability in Microsoft WSUS (CVE-2025-59287)

November 26, 2025

Debojyoti Goswami

Identity-Based Cyber Attacks 2025: Shift to Trust Manipulation

The Shift from Credential Theft to Trust Manipulation in Identity-Based Cyber Threats 2025

November 25, 2025

Kamaljeet Kaur

cloud phishing risk factors and prevention steps

Phish in the Cloud: How Mail Services Are Weaponized

November 24, 2025

Rahul Dogra

AI-driven cyber attack lifecycle showing GTG-1002 reconnaissance, exploitation, and data extraction phases.

AI-Driven Espionage Unleashed: Implications and Next Steps in the Wake of Anthropic’s Claude AI Attack

November 20, 2025

Debojyoti Goswami

How to patch WSUS CVE-2025-59287

Microsoft WSUS Remote Code Execution Vulnerability CVE-2025-59287 Requires Action

November 5, 2025

Debojyoti Goswami

Inbox flooded by email bombing used to hide phishing and remote access attacks

Inbox Overload: Email Bombing Attacks Hide Bigger Threats

October 13, 2025

Rahul Dogra

NPM package supply chain attack compromising Debug and Chalk with malicious crypto wallet code

Compromise of Popular NPM Packages Debug and Chalk

October 10, 2025

Harsha Vardhan Kurati

Shadow IT risks from unauthorized enterprise applications in Microsoft Entra ID exposing corporate data and security vulnerabilities

Shadow IT Risks from Unauthorized Enterprise Applications in Entra ID

October 6, 2025

Pratik Surendra Bhosale

Cybersecurity analyst monitoring targeted OT network attacks across industrial control systems

Rise in Targeted Attacks on OT Environments

October 3, 2025

Pratik Surendra Bhosale

Oracle E-Business Suite zero-day vulnerability CVE-2025-61882 exploited by Clop ransomware – cybersecurity threat alert

CVE-2025-61882: Critical E-Business Suite zero-day vulnerability

October 1, 2025

Pratik Surendra Bhosale

Cyber attackers exploit Axios and Salty 2FA kits to launch next-gen Microsoft 365 phishing attacks that bypass MFA defenses

Axios Abuse & Salty 2FA Kits Drive Next-Gen Microsoft 365 Phishing

September 22, 2025

Rahul Dogra

Service Request

Data

Cybersecurity

AI

Microsoft

Cloud

Critical Infrastructure

Resources

About Us

© Copyright 2026 ProArch

AI Transparency Statement | Terms of Use | Privacy policy