Two malicious extensions in Microsoft's Visual Studio Code (VSCode) Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers. [...]

Microsoft confirmed today that Outlook mobile may crash or freeze when launched on iPad devices due to a coding error. [...]

Threat actors are leveraging the file-sharing service for payload delivery in AitM phishing and BEC attacks.

The post Phishers Abuse SharePoint in New Campaign Targeting Energy Sector appeared first on SecurityWeek.