CyberheistNews Vol 14 #48 [Eye Opener] Phishing Attacks Now Exploit Visio and SharePoint Files

The newsletter highlights several active and evolving threats: sophisticated two‑step phishing campaigns leveraging SharePoint‑hosted Visio (.vsdx) files to harvest Microsoft 365 credentials; ransomware affiliates increasingly recruiting professional penetration testers to improve attack success; and a novel nation‑state (APT28/GRU) Wi‑Fi daisy‑chain technique used to pivot into target areas. It stresses the importance of TLS inspection, user training, and vigilance against AI‑enabled scams and deepfakes.