Cloud SecurityUNC6671 Targets Personal Phones to Steal Microsoft 365 and Okta Access
UNC6671 vishing campaign targets personal phones to steal Microsoft 365 and Okta access, bypassing MFA defenses.
Cloud SecurityUNC6671 vishing campaign targets personal phones to steal Microsoft 365 and Okta access, bypassing MFA defenses.
MalwareExplore how AI fuels scams, backdoors, and supply chain compromises in cybersecurity. Stay informed on emerging threats and real-world incidents.
VulnerabilitiesCritical zero-day SQL injection in Metabase allows data theft from cloud and self-hosted instances. Updates and mitigation steps provided.
VulnerabilitiesLearn about CPDLC vulnerabilities in ATN-B1 systems, including fake messages and disconnections from CISA advisory ICSA-26-219-01. CVE details included.
VulnerabilitiesLearn how XSS2Shell exploits WordPress login page via pre-auth XSS and DOM clobbering for potential server compromise and remote code execution.
VulnerabilitiesMongoDB 4.2 flaws in ABB Ability Zenon allow remote exploits, exposing industrial systems to outages and data breaches. No patches disclosed.
VulnerabilitiesMicrosoft and Apple release critical patches for Azure, Active Directory, and Screen Sharing vulnerabilities, addressing high-severity flaws.
VulnerabilitiesChrome 151 update addresses 41 security vulnerabilities, including six critical flaws, to enhance browser safety and prevent potential exploits.
MalwareClickFix malware targets macOS users, stealing crypto wallets and credentials via social engineering and bypassing Gatekeeper.