…ScarCruft hackers push BirdCall Android malware via game platform Telegram Mini Apps abused for crypto scams, Android malware delivery 'NoVoice' Android malware on Google Play infected 2.3 million devices FBI warns…
…access to Edge's Internet Explorer mode after hackers began leveraging zero-day exploits in the Chakra JavaScript engine to access target devices. The Validation Gap: Automated Pentesting Answers One Question. You…
…The hacker then reset the password, removed the MFA controls, and enrolled Microsoft Authenticator on their device. Targeting Microsoft 365 apps After hijacking the accounts, Storm-2949 used the Microsoft Graph API…
Palo Alto Networks firewall zero-day exploited for nearly a month By Sergiu Gatlan May 7, 2026 06:57 AM Palo Alto Networks warned customers that suspected state-sponsored hackers have been…
…The key new feature in the current variant is the TON-based communication with the operator, which uses .ADNL addresses routed through an embedded local TON proxy running on the infected device…
GitHub links repo breach to TanStack npm supply-chain attack By Sergiu Gatlan May 21, 2026 02:54 AM GitHub says the hackers who breached 3,800 internal repositories gained access via…
…Available in beta since April , DBSC was first announced in 2024 as a way to cryptographically bind session cookies to a specific device, preventing hackers from using such stolen cookies to bypass…
French govt messaging service breached in account hijacking attack By Sergiu Gatlan June 9, 2026 06:53 AM DINUM, the digital affairs directorate of the French government, warned that hackers used a…
Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing By Bill Toulas May 17, 2026 10:43 AM The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click…
…directed victims to Microsoft's device code login portal, where they unknowingly authorized attackers to access their accounts. The researchers said the resulting attacks gave the hackers access to their mailboxes, where…