Tracked topic
Control Resonant is the reported sequel to Remedy Entertainment’s Control, announced under the working title Control 2.
…By leveraging the same DOM-control functionality, an attacker could replace the device-linking QR code for WhatsApp to take control of the user's account. However, this scenario would require the…
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones controlled by an…
…The CVE-2026-20245 vulnerability is a high-severity command injection flaw in Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart), and Validator (vBond) that allows authenticated attackers to execute arbitrary commands…
…The malware is written in Rust and uses the Chrome DevTools Protocol (CDP) to control a headless browser session and establish a connection to the attacker's server. Since the malware routes…
…Against this rapidly evolving threat landscape, organizations need effective Zero Trust measures that protect against ‘legitimate’ logins from attacker-controlled infrastructure. It’s here that device trust helps, ensuring that valid credentials…
…However, any credentials typed in are delivered to a Telegram channel controlled by the attacker. Unlike the more common phishing pages that capture username and password pairs, the campaign uses a live…
…Hackers altered DNS settings on compromised MikroTik and TP-Link small office/home office (SOHO) routers to redirect authentication traffic to attacker-controlled servers and steal Microsoft 365 logins and OAuth tokens…
…In the second, a cryptocurrency campaign used a Rust-based clipper and retrieved command-and-control infrastructure pointers from Binance Smart Chain. The payloads were different, but neither campaign depended on breaking…
…And enterprise AI tools like Claude, ChatGPT Enterprise, Microsoft Copilot, Gemini for Workspace increasingly provide native prompt logging and DLP controls on their enterprise plans. Combining the two means that you can…
…The researchers found that the fake Xeno is promoted to Roblox players through gaming forums, Discord communities, or via compromised or impersonated accounts controlled by the threat actors. The attackers advertise the…
