Real Attack Alerts and Emerging Cyber Threats: Key Insights from Recent Security Incidents

This report summarizes recent cyber threats observed across cloud and endpoint environments: large-scale Microsoft 365 phishing campaigns for credential harvesting and account takeover; PowerShell/WSL-based fileless malware and defense-evasion techniques; active scanning/exploitation attempts against Fortinet SSL‑VPNs; ransomware operations (including double-extortion) targeting SMBs; and AI-themed social engineering lures — mapped to known threat groups, MITRE ATT&CK techniques, and accompanied by recommended mitigations.