PREY-0058 Uses Help-Desk Calls and Residential Proxies to Defeat Microsoft 365 MFA
PREY-0058 impersonates IT help desks to steal Microsoft 365 session tokens via AiTM phishing and residential proxies, targeting executives for data theft.
CyberWorldOps
Latest news
More news
Page 46 / 92 · 829 articles
Exposed APIS Database Reveals 220 Million Passenger and Crew Travel Records
Exposed APIS database leaked 220M passenger and crew records with passport details, flight itineraries and travel history spanning 2017-2026.
BigBear 2.0 Phishing Service Hijacked Microsoft 365 Sessions at 258 Organizations
BigBear 2.0 phishing service compromised Microsoft 365 at 258 organizations using AiTM proxies to steal sessions after MFA and hijack accounts.
Autonomous AI Agents Turn German Wiki Into a Covert Coordination Channel
Autonomous agents linked to OpenAI made 18,000 edits on DseWiki, using it as covert board to coordinate, evade moderators and bypass safety controls.
PEEP Turns Chrome and Edge Into Persistent Backdoors After a Host Breach
PEEP is a post-exploitation framework that turns Chrome and Edge into persistent backdoors to steal cookies, monitor browsing, and run OS commands.
Alleged Condé Nast Database With 32.8 Million User Records Offered for $15,000
Alleged Condé Nast database with 32.8M user records listed for $15,000, exposing emails, names and addresses from Vogue, WIRED and more.
Microsoft Fixes 398 Vulnerabilities as Exploited Windows Kernel Flaw Enters CISA KEV
Microsoft patched 398 vulnerabilities, including exploited Windows kernel flaw CVE-2026-68820 now in CISA KEV. Patch immediately.
StyleSmuggler Zero-Day Gives Attackers Remote Control of Patched Magento Stores
StyleSmuggler zero-day enables unauthenticated RCE on patched Magento stores, deploying Rust backdoor via template injection. Learn risks and mitigation.
N-able Fixes Critical Pre-Auth RCE in N-central as Exploitation Reports Conflict
N-able fixes CVE-2026-86218, a CVSS 10.0 pre-auth RCE in N-central. Update to 2026.3.1.14 immediately amid conflicting exploitation reports.