Malicious Twitch Extension Exposed OAuth Tokens From Nearly 31,000 Users
Twitch Enhanced Viewer extension sent users' OAuth tokens to JeetBot proxies, exposing nearly 31,000 Chrome and Firefox users to account takeover.
CyberWorldOps
Latest news
More news
Page 40 / 91 · 826 articles
Vishing Crews Use Personal Phones to Break Into Microsoft 365 Without Touching Corporate Devices
Attackers target personal phones with vishing to steal Microsoft 365 credentials, bypass MFA, enumerate environments via Graph and exfiltrate data.
NSA Plans Five Mission Centers in Rapid Agency-Wide Reorganization
NSA to replace directorates with five mission centers on China, cybersecurity, AI, combat support and global intelligence by January.
Enterprise AI Is Flooding SOCs With Benign Alerts—and Hiding Real Risk
AI alerts surged 685% as coding agents mimic attackers, flooding SOCs with benign noise and hiding credential risks and real attacks.
Orthanc DICOM Server Flaw Allows Authenticated Attackers to Corrupt Heap Memory
CVE-2026-87020 lets authenticated attackers crash Orthanc DICOM Server <1.13.0 via malicious PNG causing heap overflow. Learn impact and fixes.
CISA Expands iDirect Satellite Terminal Warning With Critical Privilege-Escalation Flaw
CISA expanded its iDirect advisory with two new flaws exposing credential hashes and enabling critical local privilege escalation on satellite terminals.
IDScan Confirms Cloud Breach Amid Claims of 153 Million Stolen Driver’s-License Scans
IDScan confirmed unauthorized access to IDScan.net amid claims 153M driver's licenses were listed on Nexus dark-web market. Investigation ongoing.
Four AVEVA Pipeline Integrity Monitor Flaws Expose Project Data and User Sessions
CISA warns of four AVEVA Pipeline Integrity Monitor flaws enabling data theft, credential recovery and XSS. Update to 2025 SP1 P2 and reset passwords.
Trezor Phishing Campaign Abused Trusted Email Infrastructure After Brevo Breach
Trezor phishing emails sent via breached Brevo targeted 347K users with fake STM32 flaw to steal wallet seeds. Learn how SAML failure enabled attack.