Stay Informed.
Stay Protected.

During the August Threat Intelligence Briefing, TRU reviewed:

• Threat Landscape: In this section, TRU will provide a brief update on cyber activity associated with Russian APT's, and TRU will also discuss threats recently observed by eSentire's SOC (PoilnRider, EKZ Stealer, TONResolver RAT) and notable vulnerabilities (CVE-2026-8451- Netscaler, CVE-2026-15409/CVE-2026-15410 – Sonicwall, CVE-2026-16232 - Checkpoint)
• Microsoft Teams Intrusions: Clusters, Deno Payloads, and the Road to PayoutsKing: eSentire has tracked a record volume of Microsoft Teams phishing intrusions in 2026, spanning multiple distinct attacker clusters with varying follow-on objectives. TRU will break down the cluster landscape, then zero in on the cases tied to UNC6692 and PayoutsKing, covering observed changes in TTPs, the phishing kit mechanics behind these campaigns, and what organizations can do to break the chain before ransomware deploys.
• Microsoft Teams Intrusions: Detection, Response, and Mitigation: The TRU team will discuss Teams intrusions from the defenders viewpoint, looking at the telemetry attacks generate, the durable signals and detections that catch them, remediations, and the mitigations and log coverage that harden the organization, so the chain is broken well before ransomware is executed.

This webinar also included a live Q&A.