Arctic Wolf has observed a recurring social engineering pattern in more than 400 incidents where threat actors have used Microsoft Teams’ external chat creation feature for impersonation scams, or to deliver malicious files.

Executive Summary On October 21, 2026, the PHP development team released emergency security updates addressing two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to by

A Ukrainian-branded ClickFix lure, a Russian-branded traffic panel, and victims from 32 countries across Europe, the Americas and Asia-Pacific. Summary Arctic Wolf Labs is tracking

Arctic Wolf Labs exposes Dark Caracal’s evolving tradecraft, linking 249 samples to two operational build profiles and a resilient Ethereum-based C2 architecture targeting Latin America.