Latest IntelligencePage 115
Search by keyword →
Hackers Let Victims Complete MFA Then Steal the Entire Microsoft 365 Session
Multi-factor authentication is meant to stop stolen-password attacks. A newly documented phishing technique instead persuades users to approve a real Microsoft ...
Kali365 Phishing Kit Abuses Microsoft Device Codes to Hijack Microsoft 365 Accounts
A phishing kit known as Kali365 is targeting U.S. organizations through device code phishing attacks that abuse Microsoft’s legitimate authentication process to...
What 434 AI-Generated Vulnerabilities Reveal About Secure Software Development
New research finds that modern AI coding models frequently generate insecure code that exposes AI-generated applications to denial-of-service attacks, hardcoded...
Iranian Hackers Are Quietly Building Access They Can Turn Into Wartime Disruption
Iran-linked hackers are not relying only on loud attacks, public leaks, or website defacements. They are quietly building access inside companies, cloud account...
Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with ...
Apple patches Hide My Email flaw after media reports and class-action lawsuit
Apple has fixed a vulnerability in its iCloud+ Hide My Email service that could expose users' real email addresses. The fix comes over a year after a security r...
Apple Releases Fixes for Hide My Email Flaw that Exposes Users’ Real Email Addresses
Apple has released a security fix addressing a critical flaw in its iCloud+ “Hide My Email” feature that could expose users’ real email addresses, undermining t...
AI-Speed Attacks Are Forcing a Rethink of Incident Response
Byline: Nikola Petrovic Accelerating Attacks. Our Detection Processes Are Still Running on Human Time. In one of my previous roles, I regularly dealt with incid...
When AI Attacks: OpenAI Models Autonomously Hack Hugging Face
Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective....
Adobe fixes Chrome extension flaw that could expose WhatsApp chats
A chain of vulnerabilities in the Adobe Acrobat Chrome extension could have allowed attackers to steal content from a victim's WhatsApp Web session simply by lu...
Cloudflare Data Reveals Which World Cup Teams Moved the Global Internet Most
The 2026 World Cup did more than fill stadiums and television screens. It reshaped when millions of people used the Internet, creating noticeable surges and dip...
How enterprise GenAI can amplify ransomware risk — and how to contain it
Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromised identities. Acronis explains how iden...
Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts
Hackers leaked names, email addresses, phone numbers, passwords, and financial information stolen from the two platforms. The post Suno, Paidwork Data Breaches...
Royal Ransomware Uses Qbot and Cobalt Strike to Rapidly Compromise Windows Domains
Royal ransomware turned ordinary Windows compromises into enterprise-wide crises by pairing a phishing foothold with fast domain takeover. In incidents reviewed...
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, whi...
Palo Alto Networks to Acquire Observability Platform Provider Embrace
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability. The post Palo Alto Networks to Acqu...
SolarWinds Patches 15 Critical Serv-U Flaws That Could Hand Attackers Root Access
SolarWinds has released important security updates for its Serv-U file transfer software, addressing 15 vulnerabilities that could allow attackers to gain eleva...
Critical Meta Vulnerability Exposed Customer Support Emails, Chats, and Uploaded Files
A broken access control flaw in Meta’s shared customer support systems exposed sensitive user data, including emails, chat conversations, and uploaded files. Di...
Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft
An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts. The post Flaw in Adobe Extensio...
Russian Intelligence Hijacks IP Cameras to Monitor Weapons Deliveries to Ukraine
Russian intelligence services have been accused of turning everyday internet-connected cameras into surveillance tools for tracking weapons deliveries to Ukrain...