Posted inCybersecurity News
OAuth consent phishing PhaaS hits 340 Microsoft orgs
A new phishing-as-a-service platform abusing Microsoft OAuth device codes shows how attackers bypass MFA with consent tokens instead of passwords.
Posted inCybersecurity News
macOS SHub Reaper stealer spoofs Google, Apple logins
New macOS info-stealer SHub Reaper is spreading via trojanized WeChat and Miro installers, spoofing Google, Microsoft and Apple logins.
Posted inCybersecurity News
Windows zero-day claims surge after latest Patch Tuesday
Security researchers are touting new Windows zero-day bugs dubbed YellowKey, GreenPlasma and MiniPlasma, but so far there are no CVEs or patches as Microsoft battles exploited flaws.
Posted inCybersecurity News
INTERPOL Ramz Sweep Nets 201 in MENA Cybercrime Crackdown
INTERPOL’s Operation Ramz led to 201 arrests, 382 more suspects identified and 53 servers seized in the first region-wide cybercrime sweep across MENA.
Posted inCybersecurity News
Malicious npm packages mimic Shai-Hulud worm code
Four newly discovered npm packages deliver infostealers and worm-like malware tied to Shai-Hulud code reuse, prompting urgent removal and token checks.
Posted inCybersecurity News
Windows BitLocker zero-day bypass exposes encrypted drives
Researcher Nightmare-Eclipse has released YellowKey, a Windows BitLocker bypass in WinRE that exposes encrypted drives; no Microsoft patch yet.
Posted inCybersecurity News
FamousSparrow APT targets Azerbaijani energy sector
FamousSparrow APT targeted Azerbaijani oil and gas in multi-wave attacks Dec 2025-Feb 2026, expanding beyond hospitality and telecom targeting.
Posted inCybersecurity News
Doh! Gentlemen RaaS breach: 16GB internal data leaked
Ransomware-as-a-service operation The Gentlemen suffered a major May 2026 breach, exposing 16GB of internal data including affiliate details and victim information.
Posted inCybersecurity News
Fresh variant of the self-propagating Shai-Hulud npm worm detected
A fresh variant of the self-propagating Shai-Hulud npm worm was detected on April 30, 2026, reigniting concerns about autonomous supply chain attacks capable of evading traditional security controls. The malware,…
Posted inCybersecurity News
The AI-powered Village pentesting tool is raising cybersecurity eyebrows.
Villager represents a significant evolution in offensive security tooling by leveraging artificial intelligence to orchestrate sophisticated attack chains. Unlike traditional penetration testing frameworks that rely on scripted playbooks, Villager operates as an AI-native penetration testing framework that integrates multiple security tools through a distributed architecture.