A campaign by Venom Spider, a financially-motivated threat group, is employing spear-phishing emails to target hiring managers.

Microsoft Bookings Vulnerability Let Attackers Alter the Meeting Details
A vulnerability in Microsoft Bookings allowed attackers to manipulate meeting details via HTML injection due to inadequate input validation. Exploited mainly through the “Reschedule” functionality,