Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing By Bill Toulas May 17, 2026 10:43 AM The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click…
Google accidentally exposed details of unfixed Chromium flaw By Bill Toulas May 21, 2026 02:13 PM Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running…
Hackers bypass SonicWall VPN MFA due to incomplete patching By Bill Toulas May 20, 2026 05:19 PM Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall…
Flipper One project needs community help to build open Linux platform By Bill Toulas May 21, 2026 07:00 AM Flipper Devices, the maker of the Flipper Zero pentesting tool, is asking…
GreyVibe hackers use ChatGPT, Gemini to power cyberattacks By Bill Toulas May 28, 2026 06:24 PM A likely Russian threat group tracked as GreyVibe has been using AI-generated lures and…
Microsoft Self-Service Password Reset abused in Azure data theft attacks By Bill Toulas May 19, 2026 03:35 PM A threat actor targeting Microsoft 365 and Azure production environments is stealing…
New Shai-Hulud malware wave compromises 600 npm packages By Bill Toulas May 19, 2026 10:30 AM Threat actors earlier today published more than 600 malicious packages to the Node Package…
Windows BitLocker zero-day gives access to protected drives, PoC released By Bill Toulas May 13, 2026 12:37 PM A cybersecurity researcher has published proof-of-concept (PoC) exploits for two…
…Automated Pentesting Answers One Question. You Need Six. Automated pentesting tools deliver real value, but they were built to answer one question: can an attacker move through the network? They were not…
AI-built ransomware toolkit automates EDR evasion, AD discovery By Bill Toulas June 2, 2026 04:01 PM A threat actor is using an AI-built ransomware attack toolkit that automates Active…