A malware named FinalDraft uses Outlook email drafts for command-and-control communication in its attacks, including those against a South American ministry. Using Outlook drafts allows the malware to avoid detection and blend into normal Microsoft 365 traffic. Discovered by Elastic Security Labs, the attack involves a threat actor compromising a target’s system with PathLoader, a custom malware loader, before executing the FinalDraft backdoor.

Navigating Cybersecurity Frameworks – CISO Resource Guide
The role of the Chief Information Security Officer (CISO) is crucial amid evolving cyber threats. Selecting the right cybersecurity framework aligns risk management with organizational