…The victim is then served a fake prompt to enter the two-factor authentication (2FA) code, which the threat actor uses to gain access to the ManageWP account. Guardio Labs head researcher…
…Max severity Ubiquiti UniFi flaw may allow account takeover Max severity Cisco Secure Workload flaw gives Site Admin privileges Hackers bypass SonicWall VPN MFA due to incomplete patching Drupal critical update to…
…In software, this can include compromising a third-party provider, developer account, source-code repository, package registry, CI/CD pipeline, update mechanism, plugin, or SaaS integration. The danger is that once attackers…
…A custom version of a system library called 'AggregatorHost.dll' was also installed to search for Steam accounts on the computer and steal account credentials. The researchers found multiple cases involving other…
…Since last year, the extortion group has been conducting widespread social engineering campaigns that target employees and BPO agents' Microsoft Entra, Okta, and Google SSO accounts. After gaining access to a corporate…
…The malware searches Chromium browser profiles for authenticated WhatsApp Web IndexedDB data, and launches a hidden Chromium instance that hijacks the victim’s account. Then, it harvests contacts, filters for Brazilian numbers…
…14, 2026, the Company's IT security team identified unauthorized activity involving an employee's account. An unauthorized actor used social engineering to deceive an employee to gain access to a limited…
…The group has also been linked to a widespread vishing campaign targeting employees' and Business Process Outsourcing (BPO) agents' Microsoft Entra, Okta, and Google SSO accounts to steal data from connected SaaS…
…The 2026 Verizon DBIR found that 45% of employees are now regular AI users on corporate devices, with 67% using non-corporate accounts. Push's own telemetry shows the average organization has…
…Red Hat packages backdoored through GitHub compromise According to Aikido, the attackers allegedly compromised a Red Hat employee's GitHub account and used it to push malicious commits directly to multiple repositories…