OAuth Client ID Spoofing Exploits Blind Spot in Microsoft Entra ID to Validate Stolen Credentials
Proofpoint has uncovered a novel evasion technique called OAuth client ID spoofing, exploited by at least two threat actors to validate stolen…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
Security researcher cereblab discovered that xAI's Grok Build coding CLI (version 0.2.93) was uploading entire Git repositories—including full commit history—to a Google…
U.S. Sanctions First VPN Service and Cryptor Seller for Ransomware Support
The U.S. Treasury Department's OFAC has sanctioned First VPN Service (1VPNS), its Ukrainian administrator Dmytro Rashevskyi, and Belarusian national Yegeniy Vladimirovich Silayev…
Google and Microsoft Pull ModHeader Extension With 1.6 Million Installs After Dormant Data Collector Found
Google and Microsoft have removed the ModHeader browser extension from their respective web stores after security researchers discovered a dormant browsing-history collector…
Weekly Cybersecurity Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
This week's cybersecurity landscape is marked by a series of critical threats and vulnerabilities. Progress has urged ShareFile customers to shut down…
MemGhost Attack: One Email Plants Persistent False Memories in AI Agents
A new attack named MemGhost demonstrates how a single email can inject persistent false memories into AI personal assistants, manipulating their future…
Meta Files Patent for AI That Listens All Day and Tracks Your Emotions
Meta has filed a patent application (US 2026/0182881) for an AI system that continuously listens to a user's voice throughout the day,…
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is targeting Microsoft 365 accounts using device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, AI-assisted…
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
A recent article on The Hacker News draws a compelling parallel between Daniel Kahneman's 'Thinking, Fast and Slow' and modern Security Operations…
Misconfigured Server Exposes Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing…