A highly sophisticated phishing platform known as the Tycoon 2FA phishing kit is redefining the threat … Tycoon 2FA Attack Silently Breaks Microsoft MFARead more
session hijacking
Ukrainian Police Identify Teen Behind Global Infostealer Campaign
An 18-year-old hacker from Odessa has been identified by Ukrainian cyber police as the operator behind … Ukrainian Police Identify Teen Behind Global Infostealer CampaignRead more
Sign in with Google Security Risks: Safer Login Strategies
In today’s digital world, convenience often comes at the cost of security. A single compromised identity … Sign in with Google Security Risks: Safer Login StrategiesRead more
Bluekit: The All-in-One Phishing Suite Automating 2FA Bypass
Cybercrime is entering a phase of extreme professionalization, and a newly identified phishing kit called Bluekit … Bluekit: The All-in-One Phishing Suite Automating 2FA BypassRead more
The Pastebin Pivot: How a Simple PowerShell Script Hijacks Telegram Sessions
In the world of cybercrime, sophistication isn’t always a requirement for success. Sometimes, all it takes … The Pastebin Pivot: How a Simple PowerShell Script Hijacks Telegram SessionsRead more
Auraboros RAT Exposes Open Spyware Control Panel
Most malware tries to stay hidden. Auraboros does something far more dangerous—it exposes itself. A newly … Auraboros RAT Exposes Open Spyware Control PanelRead more
Ivanti Neurons for ITSM Vulnerabilities Expose User Sessions
Enterprise IT environments rely heavily on platforms like Ivanti Neurons for ITSM (N-ITSM) to manage incidents, … Ivanti Neurons for ITSM Vulnerabilities Expose User SessionsRead more
Chrome Extensions Attack: 108 Add-ons Steal User Data at Scale
In today’s threat landscape, the browser has become the new perimeter—and attackers are fully exploiting it. … Chrome Extensions Attack: 108 Add-ons Steal User Data at ScaleRead more
W3LL Phishing Kit Takedown Disrupts Global MFA Bypass Attacks
The W3LL phishing kit takedown marks a significant victory in the global fight against cybercrime. In … W3LL Phishing Kit Takedown Disrupts Global MFA Bypass AttacksRead more
Urgent: Fiber v2 UUID Flaw Enables Session Hijacks & CSRF
A critical vulnerability has been discovered in Fiber v2, a widely used Go web framework, that … Urgent: Fiber v2 UUID Flaw Enables Session Hijacks & CSRFRead more