August 10, 2023 Attacker combines phone, email lures into believable, complex attack chain A social engineering phone call lends authenticity to the attacker's malicious email Threat Research
March 30, 2023 Supply chain blunder puts 3CX telephone app users at risk Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into. Naked Security
