A sophisticated BdThemes supply chain attack has compromised several popular WordPress plugins, exposing website administrators to … BdThemes Supply Chain Attack Uses Trusted Plugins to Hijack WordPress SitesRead more
account takeover
Fake Claude Install Help Delivered MacSync Malware
Mac users searching for Claude installation help were led into a dangerous trap that delivered MacSync … Fake Claude Install Help Delivered MacSync MalwareRead more
Microsoft OAuth Phishing Campaign Uses Real Login Pages to Hijack Accounts
A newly identified Microsoft OAuth phishing campaign is changing the rules of phishing by eliminating one … Microsoft OAuth Phishing Campaign Uses Real Login Pages to Hijack AccountsRead more
Malicious npm Packages Deliver Cross-Platform RAT Targeting Alibaba Developers
A cluster of malicious npm packages has been used to deliver a cross-platform remote access trojan … Malicious npm Packages Deliver Cross-Platform RAT Targeting Alibaba DevelopersRead more
Bank of Baroda Confirms Employee Email Account Compromise
Bank of Baroda has confirmed a Bank of Baroda data breach in which attackers gained unauthorized … Bank of Baroda Confirms Employee Email Account CompromiseRead more
Kratos Phishing-as-a-Service Takedown Disrupts Global Credential Theft
Authorities have dismantled Kratos phishing-as-a-service, a major phishing operation that powered around 15,000 campaigns per month … Kratos Phishing-as-a-Service Takedown Disrupts Global Credential TheftRead more
How Critical Instagram Flaw Exposed High-Profile User Data
A major architectural vulnerability in Meta’s authentication infrastructure briefly left some of the platform’s most prominent … How Critical Instagram Flaw Exposed High-Profile User DataRead more
Meta AI Support Bot Exploited in Direct Account Takeover Campaign
A critical logic flaw in Meta’s AI-powered Instagram support chatbot allowed malicious actors to completely bypass … Meta AI Support Bot Exploited in Direct Account Takeover CampaignRead more
Microsoft Tightens Entra ID Password Reset Security to Curb Identity Attacks
Microsoft is rolling out a major update to strengthen Microsoft Entra ID password reset security, enforcing … Microsoft Tightens Entra ID Password Reset Security to Curb Identity AttacksRead more
FBI Warns: Kali365 Hack Steals M365 Accounts Instantly
The FBI has issued a critical advisory warning organizations about a fast-growing phishing campaign targeting enterprise … FBI Warns: Kali365 Hack Steals M365 Accounts InstantlyRead more