News – November 28, 2025

News for today:

  • WormGPT is back. Research from Unit 42 suggests that WormGPT is back for use in malicious phishing, code dev, and ransomware attack campaigns. WormGPT 4’s language capabilities are not just about producing convincing text. By eliminating the tell-tale grammatical errors and awkward phrasing that often flag traditional phishing attempts, WormGPT 4 can generate a message that persuasively mimics a CEO or trusted vendor. This capability allows low-skilled attackers to launch sophisticated campaigns that are far more likely to bypass both automated email filters and human scrutiny. Unit 42
  • Entrust on identity fraud in 2025. Entrust’s recent 2026 Identity Fraud Report highlights the growing threat of deepfakes, social engineering, and injection attacks. New data reveals deepfakes account for one in five biometric fraud attempts, and instances of deepfaked selfies increased by 58% in 2025. Other fraud tactics across biometric systems include photo of a screen, photo of a printout, 2D and 3D masks, video of a video on screen, and video of photo on screen. This rise in deepfakes is part of a broader trend of increasingly sophisticated attacks driven by injection attacks, which surged 40% year-over-year. Injection attacks enable fraudsters to bypass live capture processes by feeding manipulated images or videos directly into verification systems. When combined with deepfakes, these sophisticated techniques can convincingly mimic users and live capture experiences, making detection difficult without robust, multi-layered fraud prevention. Entrust
  • Acronis in Australia with OpSys. Acronis announced a partnership with OpSys in Adelaide to provide Acronis’s MDR services to MSPs and clients in Australia. OpSys is the first MSSP for Acronis in Australia. Acronis partnered with OpSys due to its strong market presence in Australia and its proven ability to deliver cybersecurity services to private, public, and government organisations. Built on defence-grade expertise and operating a world-class security operations centre (SOC) capable of dealing with the complex security incidents and sophisticated cyber threats, OpSys will enable MSPs to deliver enterprise-grade MDR services to clients with thousands of seats. With 100% of data processed and stored within Australian borders, OpSys meets the growing demand for true data sovereignty. Acronis
  • Rencore Series A funding extended to $15 million. Rencore announced an extension to its Series A funding round, with the total raised now USD $15 million. Intent is to use the additional funds to fast track its expansion in Europe and North America. Building on its established success in Microsoft 365 governance, Rencore has extended its platform to include advanced AI and Agent Governance capabilities. This enables enterprises to control how AI systems interact with business data, ensure responsible AI use, and align with new standards for trust, risk, and security. With the growing adoption of AI in large organizations, these capabilities are becoming essential for CIOs and IT leaders managing Copilot deployments and other AI integrations at scale. Recore

Discover more from Osterman Research

Subscribe now to keep reading and get access to the full archive.

Continue reading