… In late April, Tycoon2FA was observed in a campaign that leveraged the OAuth 2.0 device authorization grant flows to compromise Microsoft 365 accounts, indicating that the operator continues to develop the kit. …
… According to some reporters, the account-hijacking attacks were trivial. The activity involved chatting with Meta’s AI assistant, convincing it that the attacker was the legitimate account owner, and tricking it into changing the associated email address. …
… An embedded PDB path also references the Windows account name 'Mero' and contains 'claude,' potentially indicating that AI was used to assist in developing the Windows malware. …
… Another worm module abuses Microsoft Outlook through COM automation, launching the app, harvesting contacts and sender addresses, and sending phishing emails through the victim’s email account. …
… The researchers said that the campaigns primarily targeted Microsoft 365 environments using phishing emails that directed victims to Microsoft's device code login portal, where they unknowingly authorized attackers to access their accounts. …
… Download Now Related Articles: Max-severity flaw in ChromaDB for AI apps allows server hijacking New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026 18-year-old NGINX vulnerability allows DoS, potential RCE Critical… …
… Download Now Related Articles: Anthropic’s restricted Claude Mythos model may be coming to Claude Code ChatGPT rolls out new $100 Pro subscription to challenge Claude Claude Code source code accidentally leaked in NPM package Max-severity flaw in ChromaDB for AI apps allows server hijacking Paid AI… …
… Download Now Related Articles: ChatGPT rolls out new $100 Pro subscription to challenge Claude AI-built ransomware toolkit automates EDR evasion, AD discovery Anthropic confirms Claude Mythos-class models will roll out to the public Max-severity flaw in ChromaDB for AI apps allows server hijacking … …
… Claim Your Spot Related Articles: PyPI package with 1.1M monthly downloads hacked to push infostealer New npm supply-chain attack self-spreads to steal auth tokens Backdoored PyTorch Lightning package drops credential stealer Hackers compromise Axios npm package to drop cross-platform malware Backd… …
… Download Now Related Articles: CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks Max-severity flaw in ChromaDB for AI apps allows server hijacking KnowledgeDeliver flaw exploited as a zero-day to install web shells 18-year-old NGINX vulnerability allows DoS, potential RCE New cr… …