Threat actors are increasingly turning legitimate software into part of their attack chains. Instead of deploying an obviously malicious executable, attackers can abuse trusted tools that already have ...
Mirage2FA Phishing Kit Bypasses MFA to Hijack Microsoft 365 Sessions, Targeting 3,500+ Organizations
A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft ...
Hackers are exploiting CVE-2026-60004, a critical remote code execution vulnerability affecting the Gitea development ...
MuddyWater-linked threat actors are using a backdoor named Dindoor that abuses the legitimate Deno runtime to execute ...
Mirage2FA uses AiTM phishing to steal Microsoft 365 credentials and authenticated sessions, bypassing conventional MFA and ...
An advanced malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with ...
A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...
A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.
New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat ...
Kaspersky uncovers first-ever malware targeting Android car head units, linked to the BADBOX botnet, enabling ad fraud and ...
Microsoft disclosed a critical remote code execution vulnerability affecting its Entra ID cloud identity service.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results