Trending Topics
TRENDING TOPICS
JAN 29, 2026
Update: TA584 Accelerates Initial Access Innovation with
The Rise of Federated SaaS Intrusions
ShinyHunters and Scattered Spider are vishing employees into completing legitimate OAuth logins for Salesforce, Okta, and Microsoft Entra, turning one compromised support call into federated SSO access across an organization's entire SaaS stack.
Trending Topics
GitHub repo-forking abuses trusted installer paths to spread malware. Operation Bizarre Bazaar hijacks exposed LLM infrastructure at scale. Mustang Panda upgrades its CoolClient backdoor with deeper credential theft across Southeast Asia.
Trending Topics
Lazarus Group's "Fake Font" campaign abuses VS Code tasks to deploy InvisibleFerret via fake coding interviews. Stanley MaaS guarantees Chrome Web Store approval for phishing extensions. Amatera Stealer spreads via fake CAPTCHA and App-V LOLBIN abuse.
Trending Topics
TRENDING TOPICS
JAN 26, 2026
Update: PackageGate Highlights New Ways to Slip
ConsentFix: MFA-Bypassing OAuth Phishing
ConsentFix lets attackers hijack Microsoft's own OAuth sign-in flow to steal authorization codes and bypass MFA entirely. Researchers link the technique with moderate-to-high confidence to Russia's APT29.
Trending Topics
CVE-2026-20045
Critical
Cisco Unified Communications
COMMAND INJECTION
UNAUTHENTICATED
Critical vulnerability
Trending Topics
TRENDING TOPICS
JAN 22, 2026
Active Exploitation of FortiGate Firewalls via FortiCloud
Trending Topics
TRENDING TOPICS
JAN 21, 2026
Azure Private Endpoints Can Create Hidden Denial-
Trending Topics
TRENDING TOPICS
JAN 20, 2026
Evelyn Stealer: Developer-Focused Supply Chain Malware
Trending Topic
CVE-2026-20805
Medium
Windows Desktop Window Manager
INFORMATION DISCLOSURE
LOCAL ACCESS
Trending Topics
TRENDING TOPICS
JAN 15, 2026
Microsoft Disrupts RedVDS Cybercrime Subscription Service Fueling