There is a new Xfinity/Comcast phishing campaign in which an email states that access to the user’s mailbox and stored data may be permanently discontinued if the user does not update their email. They employ actions taken by some providers to delete inactive accounts.
In these campaigns, threat actors pose as human resources (HR) departments and send emails claiming to contain information on upcoming salary increases and yearly bonuses. They deceive users into downloading unknown files, RMM tools, and more.
Multiple vulnerabilities have been discovered in Fortinet products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the affected service account.
