Hackers Exploit npm and Its Mirrors as Hosting for Phishing Pages
Hackers are exploiting npm packages and mirrors to host phishing pages that impersonate Cloudflare security checks, redirecting users to malicious sites.
Cloud Security
More news
Page 3 / 4 · 34 articles
Mirage2FA: 48% of Microsoft 365 Phishing Targets Are Potentially Compromised
Mirage2FA phishing campaign compromises 48% of Microsoft 365 targets using AiTM to bypass MFA, affecting US and Europe with stolen sessions enabling SSO fraud.
Passkeys used as backdoor: iAuthFlow V2, the phishing that survives password change
Learn about iAuthFlow V2, a phishing toolkit using passkeys to keep account access after password changes, evading standard defenses.
Microsoft patches 22 flaws: Entra ID already secured, but ShieldBreak remains unpatched
Microsoft updates 22 security flaws: Entra ID fixed, but ShieldBreak zero-day in Defender still unpatched. Cloud vulnerabilities mostly server-mitigated.
More Than 9,300 Active AWS Keys Exposed Online: Hundreds Could Grant Full Account Control
Truffle Security reveals 9,300+ valid AWS keys exposed online, including root keys that could grant full account control. Urgent revocation advised.
Cloudflare Workers: Spectre Exfiltrates a JWT at 12 Bits per Second
Researchers show how a Spectre attack on Cloudflare Workers steals a JWT at 12 bps via WebSockets and Durable Objects. See Cloudflare's countermeasures.
TwinLoot Turns Microsoft 365 into a Command Center for Attacks on Corporate Networks
Researchers at the Ontinue Cyber Defense Center have identified TwinLoot, a modular malware framework written in Python that brings the living off the
DDoS Attacks Take Threema Offline for Hours
Threema messaging service offline for hours due to DDoS attacks, affecting users and businesses. Upstream protection added for better security.
Google Workspace Attacks Can Start with OAuth, Not Email
Discover how Google Workspace breaches can start with OAuth token compromise, bypassing traditional email phishing, and learn risk mitigation strategies.