ShinyHunters flip the script on MFA in new data theft attacks
Multi-factor authentication (MFA) is supposed to defend against phishing attacks, but threat actors operating under the ShinyHunters banner are using it as a pretext in…
Latest Cybersecurity News — Page 1062
View all →InsertScript: SiteKiosk – Breakout
SiteKiosk – Breakout It has been a while since my last blog post, therefore I am going to share two possible bypasses for the software…
CTM360 Report Warns of Global Surge in Fake High-Yield Investment Scams
Fraudulent High-Yield Investment Programs (HYIPs) are surging globally, pushing “guaranteed” profits that no legitimate investment can sustain. These scams lure victims with a simple pitch:…
New Punishing Owl Hacker Group Targeting Networks of Russian Government Security Agency
A previously unknown hacktivist group called Punishing Owl has emerged with sophisticated cyberattacks targeting Russian government security agencies. The group first surfaced on December 12,…
Google Uncovers Major Expansion in ShinyHunters Threat Activity Using New Tactics
A substantial expansion in cybercrime operations using tactics consistent with ShinyHunters-branded extortion campaigns. These sophisticated operations employ advanced voice phishing (vishing) and victim-branded credential harvesting…
Ivanti Issues Urgent Fix for Critical Zero-Day Flaws Under Active Attack – Hackread – Cybersecurity News, Data Breaches, AI, and More
Research from watchTowr reveals these zero-day vulnerabilities are being actively exploited. Apply the emergency RPM patch now. Cybersecurity researchers are warning of a major security…
Hackers exploit unsecured MongoDB instances to wipe data and demand ransom
Hackers exploit unsecured MongoDB instances to wipe data and demand ransom Pierluigi Paganini February 02, 2026 Over 1,400 exposed MongoDB servers have been hijacked and…
InsertScript: Multiple PDF Vulnerabilities – Text and Pictures on Steroids
/*UPDATE */ @irsdl brought two import links to my attention: 2010 formcalc: http://t.co/6OfGLa9Cu1 2013 XXE + SOP Bypass: http://t.co/VZMSVg3HtN It seems like Adobe knew about the SOP issue…
Notepad++ update feature hijacked by Chinese state hackers for months
Chinese state-sponsored threat actors were likely behind the hijacking of Notepad++ update traffic last year that lasted for almost half a year, the developer states…
21,000+ OpenClaw AI Instances With Personal Configurations Exposed Online
21,000+ publicly exposed instances of an open-source personal AI assistant, raising significant concerns about unprotected access to sensitive user configurations and personal data. OpenClaw, a…
Researchers Uncover Moltbook AI Flaw Exposing API Keys and Login Credentials
A critical vulnerability in Moltbook, the AI agent social network launched in late January 2026 by Octane AI’s Matt Schlicht, exposes email addresses, login tokens,…
InsertScript: MHTML: x-usc – A feature from the past
What is mhtml ? For those who have never saved a complete web page in Internet Explorer, mhtml or its extensions .mht is most likely…