Passkeys were originally conceived as the ultimate cure for phishing, yet threat actors have ingeniously discovered a darker role for this technology. Currently, an attacker merely needs to telephone an employee while masquerading as...
A user may enter the correct password, complete MFA verification, and still lose their Microsoft 365 account. The phishing platform BigBear 2.0 intercepts the authenticated session after the second factor and delivers the attacker...
An unexpected request originating from corporate technical support frequently appears entirely innocuous. This perception persists until an employee unwittingly surrenders computer control directly to an unknown individual. Microsoft recently exposed a highly active campaign...
Hackers have found a way to weaponize ordinary Notion notifications to steal employee credentials. The group DOUBLOON DREDGER creates fake executive accounts, sends out document-sharing invitations, and routes victims through a chain of PDF...
The North Korean threat group Kimsuky has learned to leave behind multiple pathways back into a compromised computer, with several of them disguised as entirely ordinary software. Researchers at ENKI WhiteHat uncovered a series...
Israeli cryptocurrency company Bits of Gold has warned customers of a personal data leak following an incident within a third-party support system. Attackers may have obtained names, national ID numbers, email addresses, phone numbers,...
Iranian intelligence agencies have intensified their efforts to compromise Israeli journalists. Threat actors aggressively target media personnel through WhatsApp and Telegram. Specifically, they impersonate familiar individuals to build trust. Afterwards, they offer interviews, collaborative...
France’s tax authority has begun warning hundreds of thousands of citizens after its systems were compromised twice, granting attackers access to the tax records of individuals and companies alike. 350,000 Citizens Notified, 678,000 Total...
South Korea’s Ministry of Foreign Affairs has disclosed a leak of personal data belonging to staff at headquarters, overseas missions, and other users of the National Diplomatic Academy’s training system. Unknown attackers exploited a...
A plain archive file can easily turn into a bad hacking tool. Luckily, the maker of 7-Zip just launched version 26.02 to fix a huge flaw in XZ file tasks. During a real attack,...
Phishing services are rapidly evolving into sophisticated, turn-key platforms engineered for widespread exploitation. Recently, the novel NovaCookies toolkit enabled attackers to compromise over one hundred cloud accounts. This devastating breach afflicted a single healthcare...
Major data leaks rarely begin with hard proof. The Temu case follows that same pattern. A loud claim on a shadow forum can point to a real breach. Or it can point to an...
