Advanced Threat Operations Team

Infostealers are fueling an industrialized access economy that supports some of today's most disruptive cyber threats.

CVE-2025-53770 is a critical SharePoint zero-day (CVSS 9.8) under active attack. Learn risks, mitigations, detection steps, and Microsoft guidance.

Threat actors are increasingly leveraging Scalable Vector Graphics (SVG) files as a delivery vector for JavaScript-based redirect attacks.

Microsoft released it's May 2025 Patch Tuesday advisory, which consisted of 78 total vulnerabilities for Microsoft products.

Microsoft's March 2025 Patch Tuesday update consists of 51 vulnerabilities for Microsoft products, 6 rated Critical and 6 vulnerabilities (earlier zero-days)…

Leaked Black Basta chat logs reveal rare insights into ransomware tactics, operations, and global targeting. Learn what it means for cybersecurity defense.

Review the January 2025 Microsoft Patch Tuesday update with 209 CVEs, 12 critical flaws and active exploitations.

Get the breakdown of Microsoft’s December 2024 Patch Tuesday—key fixes, exploit status and actionable defence steps.

Get a breakdown of November 2024 Patch Tuesday from Microsoft—identified critical vulnerabilities and recommended remediation.

Chinese state-sponsored attacks have increasingly become a significant concern for governments and enterprises worldwide

Learn how Lumma malware spreads via fake CAPTCHA pages and PowerShell. Get actionable tips to raise awareness and strengthen defenses this Cybersecurity…

Discover how attackers exploit Microsoft-owned domains in LOLSites phishing attacks to bypass defenses. Learn key tactics and defense strategies.

Explore the October 2024 Patch Tuesday update from Microsoft, including critical CVEs and guidance for rapid mitigation.

New RCE vulnerability found in CUPS on Linux/Unix. Learn risks, mitigations, and urgent steps to secure systems against this remote exploit.

This vulnerability is being leveraged as part of a campaign by the Void Banshee threat actor group as a means to deploy infostealer malware.

In this podcast episode, security leaders review the H1 2024 Threat Intelligence Report and discuss what CISOs must act on now.

Ontinue breaks down the September 2024 Patch Tuesday updates — critical vulnerabilities to patch, mitigation steps and detection guidance.

New report spotlights the rise of sophisticated phishing techniques using Microsoft-owned domains and the ongoing threat of Infostealers.

There are 92 new patches for Microsoft products. Nine are rated critical, 6 being actively exploited and 3 rated important.

Last year, the cybersecurity landscape witnessed a significant shift with the emergence of Adversary-in-the-Middle (AiTM) phishing attacks.

QR phishing is a new threat that emerged and took the cybersecurity world by storm. This method bypasses common security controls.

July 2024 Windows patches address 142 vulnerabilities including 4 critical ones. Read the advisory for mitigations, CVE highlights, and detection tips.

Explore the 2023 Threat Intelligence Report with Ontinue: trends, attack patterns, and insights to strengthen your security posture.

The team will highlight vulnerabilities that could potentially disrupt an organization's business, and how to protect themselves.

This Nov update consists of patches for 64 different vulnerabilities in Microsoft products. Including 3 rated critical and 3 that are being actively exploited.