Fortinet admins have two more reasons to clear their calendars after CISA confirmed a pair of critical FortiSandbox bugs are ...
ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...
New Microsoft 365 phishing kits Jalisco and OmegaLord abuse OAuth codes and fake login pages to bypass MFA and steal cloud ...
Microsoft's July Patch Tuesday release broke the record for a second straight month, delivering fixes for roughly 570 holes across Windows, SharePoint, Microsoft 365, Azure and others.
Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using ...
New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA ...
Much has been written about how the days of phishing emails laden with broken grammar and crude design are numbered, largely thanks to AI. Meanwhile, EvilTokens offers a somewhat different example of ...
The United States has issued a warning about an actively exploited vulnerability affecting Microsoft Excel users who have not yet updated to the latest version of the software. America’s cyberdefence ...
The April 2026 security updates from Microsoft may seem similar to previous months' "Patch Tuesday" updates, but these updates contain something a little more in-depth than just the usual application ...
A new phishing-as-a-service (PhaaS) campaign is abusing Microsoft’s device code authentication flow to gain unauthorized access to user accounts. Sekoia researchers first spotted the toolkit ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results