MFA Prompt Bombing: Why Your Second Factor Isn’t Saving You
Multi-factor authentication (MFA) was supposed to close a critical gap in identity security. It meant that, even if an attacker...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks
The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed...
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
The Iranian state-sponsored threat actor known as Nimbus Manticore (aka Screening Serpens and UNC1549) has been attributed to a fresh...
Third-Party Cyberattack Impacts Patient Information at The Oncology Institute
Third-Party Cyberattack Impacts Patient Information at The Oncology Institute Pierluigi Paganini May 26, 2026 The Oncology Institute disclosed a data...
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
Ravie LakshmananMay 26, 2026Vulnerability / Threat Intelligence A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System...
Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites
Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites Pierluigi Paganini May 25, 2026 Threat actors are...
340 Million OnlyFans Profiles Allegedly Rebuilt from Leaks
340 Million OnlyFans Profiles Allegedly Rebuilt from Leaks Pierluigi Paganini May 25, 2026 A hacker is selling a 340M-strong OnlyFans-linked...
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
Ravie LakshmananMay 25, 2026Cybersecurity / Hacking Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old...
Hacker Lists 340M OnlyFans User Records for Sale
OnlyFans users may be facing one of the largest identity-exposure scares yet tied to the platform. Hackread found a hacker...
Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise
Digital Security Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and...
Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise
Digital Security Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and...
Webworm: New burrowing techniques
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but...
Webworm: New burrowing techniques
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but...
The quest for greater tech independence
The Trump administration’s shift in tone and approach toward traditional allies has understandably unsettled many nations, raising doubts about U.S....
The quest for greater tech independence
The Trump administration’s shift in tone and approach toward traditional allies has understandably unsettled many nations, raising doubts about U.S....
