A critical logic flaw in Meta’s AI-powered Instagram support chatbot allowed malicious actors to completely bypass … Meta AI Support Bot Exploited in Direct Account Takeover CampaignRead more
Author: Rakesh
Critical MCP Toolbox Flaw Exposes Enterprise Databases via DNS Rebinding
A newly disclosed MCP Toolbox vulnerability is raising serious concerns across enterprise environments, particularly those relying … Critical MCP Toolbox Flaw Exposes Enterprise Databases via DNS RebindingRead more
Critical Magento Cache Plugin Flaw Allows Remote Code Execution
A newly disclosed Magento cache plugin vulnerability is putting thousands of ecommerce stores at immediate risk … Critical Magento Cache Plugin Flaw Allows Remote Code ExecutionRead more
Critical IBM WebSphere Flaw Allows Remote Code Execution
A newly disclosed IBM WebSphere RCE vulnerability is raising alarms across enterprise IT environments, with security … Critical IBM WebSphere Flaw Allows Remote Code ExecutionRead more
North Korean Hackers Exploit Packagist to Target PHP Developers
A sophisticated software supply chain attack linked to the Famous Chollima Packagist attack has exposed a … North Korean Hackers Exploit Packagist to Target PHP DevelopersRead more
Microsoft Tightens Entra ID Password Reset Security to Curb Identity Attacks
Microsoft is rolling out a major update to strengthen Microsoft Entra ID password reset security, enforcing … Microsoft Tightens Entra ID Password Reset Security to Curb Identity AttacksRead more
Hackers Use ‘Underminr’ to Bypass DNS Security via CDNs
Cybersecurity researchers have uncovered a sophisticated technique that allows attackers to bypass protective DNS filtering by … Hackers Use ‘Underminr’ to Bypass DNS Security via CDNsRead more
Tycoon 2FA Attack Silently Breaks Microsoft MFA
A highly sophisticated phishing platform known as the Tycoon 2FA phishing kit is redefining the threat … Tycoon 2FA Attack Silently Breaks Microsoft MFARead more
Grandoreiro Malware Resurfaces, Targeting Banks and Businesses
The Grandoreiro malware—a long-standing banking trojan active since 2016—has returned with new campaigns targeting financial institutions … Grandoreiro Malware Resurfaces, Targeting Banks and BusinessesRead more
GHOST STADIUM Phishing Campaign Targets FIFA World Cup 2026 Fans
As global anticipation builds for the 2026 FIFA World Cup, a large-scale cybercriminal operation known as … GHOST STADIUM Phishing Campaign Targets FIFA World Cup 2026 FansRead more