Global coalition dismantles Tycoon 2FA phishing kit
Tycoon 2FA, a major phishing kit and platform that allowed low-skilled cybercriminals to bypass multifactor authentication and conduct large-scale adversary-in-the-middle...
that
ClickFix attackers using new tactic to evade detection, says Microsoft
“And all Windows computers should already be restricted so that random, unsigned (not signed by the organization), PowerShell commands should...
Leaked Mac benchmarks show that Apple offers tomorrow’s AI PCs today
In this day and age, it means how well your systems run artificial intelligence. We know that every single one...
Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT
Cybersecurity researchers have disclosed details of a multi-stage malware campaign that uses batch scripts as a pathway to deliver various...
Cybersecurity Still Struggles to Retain and Elevate Women…Why?
“Since co-founding Brinqa 17 years ago, the biggest lesson I have been taught is that talent is the hardest...
Your SOC Doesn’t Need More Tools. It Needs Fewer.
The average SOC manages 83 security tools from nearly 30 vendors. If that number surprises you, you’ve probably never...
The Circus at CISA Continues
A few weeks ago, I wrote that CISA looked like it was on life support. A few days later,...
Zero Trust in the Age of AI: Why the Classic Model Isn’t Enough Anymore
Here's a statement that should make any security architect pause: In most enterprise environments today, machine identities – service...
Zero Trust in the Age of AI: Why the Classic Model Isn’t Enough Anymore
Here's a statement that should make any security architect pause: In most enterprise environments today, machine identities – service...
Cisco Confirms Active Exploitation of Two Catalyst SD-WAN Manager Vulnerabilities
Ravie LakshmananMar 05, 2026Vulnerability / Enterprise Security Cisco has disclosed that two more vulnerabilities affecting Catalyst SD-WAN Manager (formerly SD-WAN...
Europol-Led Operation Takes Down Tycoon 2FA Phishing-as-a-Service Linked to 64,000 Attacks
Tycoon 2FA, one of the prominent phishing-as-a-service (PhaaS) toolkits that allowed cybercriminals to stage adversary-in-the-middle (AitM) credential harvesting attacks at...
The Worm Turns – When the Hunter Becomes the Hunted Mass Surveillance and the Weaponization of the Data We Voluntarily Create
The Art of War famously teaches that the most effective strategy is to defeat an adversary by turning the...
N8N: Shared Credentials and Account Takeover
Executive Summary We identified a security weakness in n8n’s credential management layer that could have completely compromised the application’s...
Starkiller Phishing Suite Uses AitM Reverse Proxy to Bypass Multi-Factor Authentication
Cybersecurity researchers have disclosed details of a new phishing suite called Starkiller that proxies legitimate login pages to bypass multi-factor...
Microsoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets
Ravie LakshmananMar 03, 2026Phishing / Malware Microsoft on Monday warned of phishing campaigns that employ phishing emails and OAuth URL...
