ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
latesthackingnews.com

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

Credential stuffing tests stolen password lists against your login form until one matches. Here is how to spot the traffic ...

Over 900 Oracle E-Business instances exposed to ongoing attacks

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical ...
The Next Web

The captive portal economy: how hotel WiFi sign-in pages became both a security vector and a hidden ad channel

KeepSolid CEO Vasyl Ivanov explains how hotel WiFi captive portals evolved into both a security vulnerability and a programmatic ad channel, and what VPN clients should do about it.
KSL

Here are early warning signs that you've been hacked and how you can protect yourself

The moment you've been hacked, you won't see a big message screaming ...

The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...
SecurityWeek

Massive Password Spray Campaign Targeting Azure CLI

Threat actors have made over 81 million login attempts in a massive password spray campaign targeting Azure CLI.

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private ...