Former National Cyber Director Chris Inglis warns that cyber attacks threaten hospitals, utilities and essential services.

Voluminous patch updates could soon be the norm, as artificial intelligence accelerates the speed and scale of vulnerability discovery.

“Ghost-Sender” uses Exchange Online or on-premises in hybrid mode with a third-party mail server or spam filter to achieve this level of spoofing.

The attacks stemmed from a GitHub account that was also compromised in a previous Miasmi attack on Microsoft last month.

Two separate campaigns target CVE-2025-8088, fixed last July, to conduct data theft and cyberespionage against military and government targets in Ukraine.