Mirage2FA Phishing Campaign Hits 4,500+ Companies, Bypassing Microsoft 365 MFA
A large-scale phishing campaign dubbed Mirage2FA has impacted over 4,500 organizations in the US and EU, abusing Microsoft 365 login flows to…
Tag: session hijacking
Mirage2FA: Phishing-as-a-Service Toolkit Bypassing MFA
Mirage2FA is a commercial phishing-as-a-service toolkit that targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. Active from…
Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
Cybersecurity researchers at SpecterOps have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or…
Dotouch Patches Session Hijacking Flaw in XproUPF
Dotouch, a vendor of 5G core network solutions, addressed a session hijacking vulnerability in its XproUPF product, tracked as CVE-2026-8233. The flaw…
Open5GS Affected by 84 Flaws in 4G/5G Core Networks
Open5GS, an open-source implementation of 4G and 5G core networks, was one of the seven implementations analyzed in the study. It was…
free5GC Flaws Expose 5G Core Networks to Attacks
free5GC, an open-source 5G core network implementation, was among the affected systems in the study. The vulnerabilities could allow attackers to cause…
XproUPF Session Hijacking Vulnerability (CVE-2026-8233)
XproUPF, a product by Dotouch, was found to contain a session hijacking vulnerability (CVE-2026-8233) that could allow an attacker to redirect a…
84 Flaws Found in 4G and 5G Core Networks, Including Session Hijacking Vulnerability
Researchers from Singapore's Nanyang Technological University have disclosed a widespread class of security vulnerabilities affecting 4G and 5G core networks. The study,…
CVE-2026-8233: Session Hijacking Vulnerability in Dotouch XproUPF
CVE-2026-8233 is a session hijacking vulnerability discovered in Dotouch's XproUPF, a 5G core network User Plane Function. The flaw allows an attacker…
OctoLink Live (Kali365 Live) Desktop Application
OctoLink Live is a desktop application used with Kali365 to launch Chromium browser sessions and access victim mailboxes in OWA, OneDrive, SharePoint,…