ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks.
KSL

Here are early warning signs that you've been hacked and how you can protect yourself

The moment you've been hacked, you won't see a big message screaming ...

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private ...

SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...
SecurityWeek

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

FortiBleed campaign targeting FortiGate firewalls is tied to INC and Lynx ransomware, with over 110 million stolen credentials linked to attacks.
Hackaday

This Week In Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, And LastPass Customer Leak

Unsurprisingly to many of us, app stores for smart televisions are also trash. Perhaps even more full of trash than other app stores due to the smaller ecosystem and fewer reviewers. Spur analyzed ...