Cyberattackers have developed a new tactic that allows them to hijack Microsoft 365 accounts in as little as three seconds, using a technique called ConsentFix. This method exploits the trust users place in legitimate-looking authentication screens, making it difficult for even the most vigilant individuals to detect. The attack begins with a phishing lure sent … Read more
A landmark antitrust ruling has dealt a significant blow to Google’s business practices, with the Court of Justice of the European Union (CJEU) upholding a €4.1 billion fine levied against the tech giant in 2018. The case centers on Google’s use of its Android operating system to promote its own products and services, specifically Chrome … Read more
Cybersecurity teams are scrambling to address a critical vulnerability exposed by artificial intelligence (AI) models, highlighting a glaring oversight in identity lifecycle management systems. These systems, designed to grant and revoke access to sensitive resources based on user identities, were not built with AI agents in mind. As a result, organizations worldwide are at risk … Read more
A New Wave of Malware Exploits OAuth Vulnerability to Infiltrate Gmail Accounts via Google API A sophisticated malware campaign linked to the ToddyCat threat group has been uncovered, leveraging a previously unknown vulnerability in Google’s OAuth authentication system to gain unauthorized access to Gmail accounts. This alarming development highlights the ongoing cat-and-mouse game between cybercriminals … Read more
Microsoft 365 Accounts Hijacked in 3 Seconds: The Stealthy Threat of ConsentFix and ClickFix Attacks In a chilling example of modern cybercrime, threat actors are exploiting everyday online habits to hijack Microsoft 365 accounts in just three seconds. This brazen tactic involves manipulating users into surrendering OAuth tokens, granting attackers session access to email and … Read more
Cybersecurity experts have recently sounded the alarm about a new and insidious threat, one that could potentially compromise even the most secure systems. It starts with artificial intelligence (AI) models being used to detect software vulnerabilities, but with a twist: these AI models are also being exploited by malicious actors to hijack compute resources. The … Read more
The European Union has reaffirmed its stance on Google’s business practices, dismissing the company’s final appeal against a €4.1 billion antitrust fine. This decision is a significant blow to Google, as it confirms that the tech giant abused its dominant market position by promoting its Chrome browser and search service through Android agreements. At the … Read more
Cybersecurity Teams Scramble to Contain Breaches as AI-Powered Attackers Exploit Identity Management Weaknesses A growing threat is emerging in the world of cybercrime, where sophisticated attackers are using artificial intelligence (AI) agents to exploit vulnerabilities in identity lifecycle management systems. These attacks have left many organizations scrambling to contain breaches and wondering how such a … Read more
A sophisticated malware campaign linked to the ToddyCat threat actor has been uncovered, exploiting a vulnerability in Google’s OAuth 2.0 authentication system to gain unauthorized access to Gmail accounts via the Google API. The attack leverages the API’s legitimate functionality to quietly collect sensitive user data, raising significant concerns about the security of online services … Read more
A Wave of Attacks Exploits AI-Powered Vulnerability Discovery, Leaving Organizations Scrambling for Defense In a disturbing trend that highlights the dark side of artificial intelligence (AI) adoption, attackers are increasingly leveraging AI-powered tools to discover and exploit software vulnerabilities. This development has left many organizations scrambling to bolster their defenses against an evolving threat landscape. … Read more