Data Breaches
A major vulnerability in a prominent companion AI platform has led to the public exposure of sensitive prompts and account identifiers, highlighting the privacy risks of generative AI data retention. SAN FRANCISCO — Security researchers have confirmed a significant data breach at MyLovely.ai, a popular "AI companion" platform.
Trending
A novel Phishing-as-a-Service platform is leveraging Microsoft's device code flow to bypass multi-factor authentication and automate business email compromise at scale. REDMOND — Security researchers have identified a surge in high-velocity phishing campaigns powered by a new service called "EvilTokens." The platform
Scattered Spider
Introduction to Scattered Spider Scattered Spider is a highly active hacking group, also known as 0ktapus, UNC3944, or Muddled Libra, that has rapidly evolved into one of the most dangerous threat actors targeting enterprises today. The group focuses its attack efforts on the target organization by conducting reconnaissance, impersonating employees,
Account Takeover (ATO)
Account takeover (ATO) lets attackers log in as you with stolen credentials, then commit fraud. This guide explains how ATO attacks work, the techniques behind them, the warning signs to watch for, and the layered defenses that actually stop them.
Credential Attacks
Credential stuffing replays billions of breached and infostealer-leaked passwords as automated logins to hijack reused accounts. A practitioner's guide to how it works, how it differs from brute force, and the layered defenses — led by phishing-resistant MFA — that stop it.
Cyber Attacks
Roku has disclosed a cybersecurity incident that resulted in unauthorized access to more than 570,000 user accounts, marking one of the largest account takeover events to impact a major streaming platform in recent months. The company said in an official security update that the breach did not stem from