Remember, remember the fifth of November
Summary: Cisco Talos' Threat Source newsletter recounts the 1605 Gunpowder Plot, in which conspirators rented a vault beneath the House of Lords, packed it with 36 barrels of gunpowder, and assigned Guy Fawkes to light the fuse before an anonymous warning led Sir Thomas Knyvet to search the cellars and arrest Fawkes. The same edition cites a Cisco Talos Incident Response report describing an internal phishing campaign launched from compromised O365 accounts in which attackers modified email-management rules to hide sent phishing emails and replies.
Key Takeaway: The newsletter's own example is an attacker hiding inside compromised O365 accounts by editing inbox rules, and the question it puts to customers is whether you can identify malicious inbox rules across your whole environment, not just one mailbox and not just the last 90 days.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026