This week’s briefing covers: New MORE_EGGS campaign continues recruiting themes KTA032 (FIN6) has begun a new campaign using the MORE_EGGS JavaScript backdoor which continues its themes surrounding fake resumes leading to the malware deployment. The actor engaged with organization recruiters which led to emails containing a malicious domain (often containing the fake applicant’s first and last name). The domain contains several defense evasion techniques to avoid automated analysis tools from scanning.

CSRF is a web security vulnerability that tricks users into performing unwanted actions on a website where they are already authenticated like changing account settings or making a purchase without their knowledge. In this video, we explain how CSRF attacks work and how attackers exploit user trust to hijack authenticated sessions.

Learn the fundamentals of Disaster Recovery in this insightful webinar led by Jason Taylor, Senior Cybersecurity Program Analyst at Sedara. He covers what disaster recovery is, common causes of disasters, response and recovery workflows (BCP, IR, and DR), the seven key steps to building a DR plan, recovery playbooks, and how to create an effective DR project plan. A must-watch for IT and security teams preparing for the unexpected.

In this video, I’m checking out the brand new Cursor 1.0 release and testing one of its most exciting new features — the one-click MCP install. Setting up MCP servers has never been this easy! Join me as I walk through the process, share my first impressions, and see how smooth (or not) the setup really is. If you’ve been curious about Cursor or want to simplify your MCP workflows, this one’s for you.

A Distributed Denial-of-Service (DDoS) attack is an attempt to disrupt the normal traffic of a targeted server. Watch this short video to learn more about DDoS attacks and how you can protect yourself.