Voluminous patch updates could soon be the norm, as artificial intelligence accelerates the speed and scale of vulnerability discovery.

“Ghost-Sender” uses Exchange Online or on-premises in hybrid mode with a third-party mail server or spam filter to achieve this level of spoofing.

The attacks stemmed from a GitHub account that was also compromised in a previous Miasmi attack on Microsoft last month.

Two separate campaigns target CVE-2025-8088, fixed last July, to conduct data theft and cyberespionage against military and government targets in Ukraine.

The financially motivated group is combining vishing, IT impersonation, and in-person office intrusions to steal data and extort victims.