Cybercriminals are using SourceForge to distribute bogus Microsoft add-ins which install malware on victims’ computers to mine and steal cryptocurrency. The campaign has affected over 4,604 systems, mainly in Russia. Users are encouraged to only download software from verified, trusted publishers and scan files with an up-to-date antivirus tool before running them.

Hackers Actively Exploiting Critical Exchange & SharePoint Server Vulnerabilities
Microsoft has warned that cybercriminals are increasingly exploiting critical vulnerabilities in on-premises Exchange and SharePoint Servers. New techniques like NTLM relay and credential leakage enable