Typhoon by Consent: Quiet, Durable, Everywhere

Typhoon by Consent: Quiet, Durable, Everywhere

One “Allow” → tenant-wide weather event. 🌀
AI agent phish wraps the consent flow, device-code keeps churning, and Typhoon rides “good” U.S. infra. Kill list: user consent, device-code, or EWS app perms—what’s first?

Will UNC5221 pop a fresh zero-day before Dec 31? Updated!

Will UNC5221 pop a fresh zero-day before Dec 31? Updated!

UNC5221 is an edge-focused PRC espionage actor repeatedly tied to zero-days (Ivanti 2023–2025; prior NetScaler). Edge products remained a major zero-day target in 2024. But public attributions typically lag exploitation by weeks, and the window is short...