TL;DR
Microsoft Copilot Personal vulnerabilities enable one-click data exfiltration from connected apps. MLflow and FUXA critical flaws are under active exploitation for credential theft. Windows Task Host flaw now exploited by ransomware gangs in the wild.
Executive Summary
- Microsoft Copilot Personal contains three vulnerabilities allowing silent data exfiltration through a single crafted link, affecting users with connected cloud services.
- MLflow and FUXA critical flaws are witnessing malicious scanning and exploitation efforts targeting cloud credentials and industrial automation systems.
- Windows Task Host vulnerability now confirmed exploited by ransomware gangs, escalating from April’s initially reported active exploitation.
- A new Python implant framework, TWINLOOT, abuses Microsoft SharePoint and Teams for lateral movement and credential harvesting.
- Microsoft released patches for 398 vulnerabilities including one already being actively exploited. ⚠
Top Threats Today
1. Microsoft Copilot Personal One-Click Data Exfiltration
Severity: HIGH Affected: Technology
Varonis Threat Labs disclosed three vulnerabilities in Microsoft Copilot Personal that could allow a single click on a crafted link to silently extract data from connected apps and other information available to a victim’s Copilot session [1]. The attack requires only user interaction with a malicious link and poses a direct threat to any organization where employees use Copilot with integrated cloud services and SaaS applications.
Sources:[1] The Hacker News
Recommended Action
- Audit all user access to Copilot and review which cloud services and applications are connected to Copilot accounts.
- Deploy email and browser-based link filtering to block or warn on suspicious URLs in messages from external senders.
- Monitor Copilot session logs for unusual data access patterns and exfiltration activity.
- Communicate to users to avoid clicking links from untrusted sources, especially those redirecting to Copilot.
2. MLflow and FUXA Critical Flaws Under Active Exploitation
Severity: HIGH Affected: Technology, Energy
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence platform, and FUXA, an open-source web-based SCADA/HMI software for operational technology and industrial automation, are witnessing malicious scanning and exploitation efforts [1]. These flaws expose organizations running ML pipelines and critical industrial systems to credential theft and unauthorized access to cloud environments and operational networks.
Sources:[1] The Hacker News
Recommended Action
- Identify all instances of MLflow and FUXA running in production and development environments across your organization.
- Prioritize patching or isolating affected instances, especially SCADA/HMI deployments in OT networks.
- Implement network segmentation to restrict MLflow and FUXA access to authorized users and systems only.
- Review cloud credential storage and rotation policies for systems connected to MLflow.
3. Windows Task Host Ransomware Exploitation Confirmed
Severity: HIGH Affected: Technology
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April [1]. This represents an escalation from initial discovery to confirmed widespread ransomware use, indicating the vulnerability is a reliable entry vector for extortion attacks.
Sources:[1] BleepingComputer
Recommended Action
- Apply Windows patches released today or the most recent patch Tuesday addressing Task Host vulnerabilities.
- Prioritize Windows systems in high-risk environments (public-facing servers, file shares, endpoints with sensitive data).
- Conduct endpoint detection and response (EDR) hunts for exploitation attempts or Task Host abuse in your environment.
- Review ransomware-specific threat intelligence for IOCs related to this attack vector.
4. TWINLOOT Python Implant Abuses Microsoft Services for Lateral Movement
Severity: HIGH Affected: Technology
Researchers disclosed TWINLOOT, a previously undocumented modular Python implant framework designed to operate its entire command-and-control infrastructure inside trusted Microsoft services [1]. The framework abuses SharePoint and Teams to steal credentials and move laterally across networks, leveraging legitimate Microsoft services to evade detection and maintain persistence.
Sources:[1] The Hacker News
Recommended Action
- Review SharePoint and Teams audit logs for unusual file access, sharing, or communication patterns from service accounts or compromised users.
- Implement conditional access policies in Azure AD to restrict unusual sign-ins to SharePoint/Teams from unexpected locations or devices.
- Deploy threat detection rules for Python execution and suspicious module imports on endpoints.
- Enforce credential hygiene audits and MFA enforcement for all SharePoint and Teams administrative accounts.
5. Clop Gang Targets Industrial Control Systems with Custom Web Shell
Severity: HIGH Affected: Manufacturing
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt ⚠ credentials, enumerate file repositories, and steal files [1]. The targeting of product lifecycle management systems indicates focus on theft of intellectual property and engineering data from manufacturing organizations.
Sources:[1] BleepingComputer
Recommended Action
- Audit all PTC Windchill and FlexPLM instances for unauthorized web shells and suspicious Java processes.
- Implement strict access controls and firewall rules limiting Windchill/FlexPLM exposure to trusted networks only.
- Enable detailed logging on file access and credential usage within these systems.
- Review recent backups for evidence of lateral movement or persistence mechanisms planted by threat actors.
Today’s Action Checklist
- ☐ URGENT: Patch Windows systems for Task Host vulnerability; confirm ransomware gangs are actively exploiting it.
- ☐ URGENT: Identify and isolate MLflow and FUXA instances; these are under active attack for cloud credential theft.
- ☐ Review Copilot integration scope; audit which SaaS apps are connected and accessible via single-click exfiltration flaws.
- ☐ Hunt SharePoint and Teams logs for TWINLOOT or similar Python implant activity; check for unusual credential access or lateral movement.
- ☐ Scan PTC Windchill/FlexPLM for Clop-linked web shells; strengthen isolation and monitoring of product lifecycle systems.
- ☐ Deploy patches from today’s Microsoft monthly update (398 vulnerabilities remedied); prioritize the one already in active exploitation.