Microsoft has warned that cybercriminals are increasingly exploiting critical vulnerabilities in on-premises Exchange and SharePoint Servers. New techniques like NTLM relay and credential leakage enable persistent access and data exfiltration. To counter these threats, Microsoft has integrated AMSI for real-time detection of malicious activity. Organizations are urged to apply security patches, enable AMSI, and monitor for suspicious activity.

Even More Schedule 1 Mods Found to Contain Malware
The Schedule 1 modding community is facing a potential threat as more modifications have been discovered containing dangerous malware. Mods including “Just Enough Drugs” and