Quiet attacks of the week in cybersecurity: bucket hijacking, LPE, and Teams phishing

Colleagues, I’d like to draw your attention to several cybersecurity developments.

More often than not, attacks still begin not with a breach, but with trust in everyday processes.

• Cloud bucket hijacking can quietly redirect data to an attacker-controlled repository.
• In Windows, researchers demonstrated a privilege-escalation chain using vulnerabilities and RPC spoofing.
• EtherRAT is being delivered through Microsoft Teams and fake IT support.
• Fake SDKs were found in npm and PyPI, stealing developers’ secrets.

Why it matters: control over privileges, dependencies, outbound traffic, and familiar workflows is becoming critical.

What is least under control in your environment — cloud, endpoints, or the supply chain?

#cybersecurity #cloudsecurity #phishing #malware