Tag Archives: Cybersecurity
Microsoft 2FA Update: Phasing Out SMS for Personal Accounts
Microsoft is phasing out SMS-based Microsoft 2FA for personal accounts due to security risks, encouraging users to switch to passkeys and authenticator apps. Continue reading
AI Safety Regulation Halted by Trump After Silicon Valley Lobbying
President Trump has abruptly postponed a landmark executive order on AI safety regulation following intense lobbying from major tech executives concerned about innovation. Continue reading
Microsoft Zero-Day Exploits: Emergency Patches Issued After Nightmare-Eclipse Leaks
Active exploitation of new Microsoft zero-day exploits leaked by a disgruntled researcher has forced urgent Windows Defender patches and BitLocker security mitigations. Continue reading
Device Code Phishing: FBI Issues Alert on Kali365 PhaaS Platform
The FBI warns that the Kali365 PhaaS platform is using device code phishing to bypass 2FA. Learn how this attack works and how to protect your organization. Continue reading
Kali365 Phishing: FBI Warns of Microsoft 365 Token Hijacking
The FBI has issued an alert regarding the Kali365 phishing toolkit, which bypasses MFA by hijacking Microsoft 365 tokens via legitimate device code flows. Continue reading
Mullvad VPN vulnerability Disclosed: Exit IP Fingerprinting Flaw Patched
Mullvad VPN has disclosed and initiated a patch for an exit IP fingerprinting vulnerability that threatened user anonymity during server-to-server connections. Continue reading
GitHub Codebase Breach: Internal Repositories Stolen via VS Code Extension
Microsoft’s GitHub is investigating a major GitHub codebase breach after hackers exfiltrated thousands of internal repositories using a poisoned VS Code extension. Continue reading
Mini Shai-Hulud Worm: TeamPCP Targets GitHub and npm
The Mini Shai-Hulud worm has launched a massive software supply chain campaign, targeting GitHub and npm registries to harvest credentials and exfiltrate corporate data. Continue reading