MFA bypass attack – Threat Note

From Cyber Security News – Arkana Ransomware Group Claims Compromise of US Telecom Companies

The largest US internet provider, WideOpenWest (WOW!), is allegedly compromised by Arkana Security, a recently discovered ransomware group. The attack, which security researchers trace to an infostealer infection from September…

shaikh Saqib March 27, 2025

News

From Cyber Security News – Microsoft365 Themed Attack Leveraging OAuth Redirection for Account Takeover

Two sophisticated phishing campaigns were observed targeting Microsoft 365 users by exploiting OAuth redirection vulnerabilities combined with brand impersonation techniques. Threat researchers are warning organizations about these highly targeted attacks…

shaikh Saqib March 14, 2025

News

From Security Week – How Social Engineering Sparked a Billion-Dollar Supply Chain Cryptocurrency Heist

[[{"value":"The $1.4 billion ByBit cryptocurrency heist combined social engineering, stolen AWS session tokens, MFA bypasses and a rigged JavaScript file. The post How Social Engineering Sparked a Billion-Dollar Supply Chain…

shaikh Saqib March 7, 2025

News

From Cyber Security News – SonicWall Firewall Authentication Bypass Vulnerability Exploited in Wild Following PoC Release

A critical authentication bypass vulnerability in SonicWall firewalls, tracked as CVE-2024-53704, is now being actively exploited in the wild, cybersecurity firms warn. The surge in attacks follows the public release…

shaikh Saqib February 16, 2025