Social Engineering
A phishing wave is impersonating Signal Support to ask users for their secret recovery key — the key that decrypts online backups containing past messages. The defender utility is simple: Signal will never ask for it, ever.
Data Breaches
A threat actor advertised a 340 million-record OnlyFans dataset for 0.313 BTC on May 25, then privately admitted they did not breach the platform. The compilation stitches old breach data to public profiles, and the framing failure is itself the editorial story.
phishing
The FBI's IC3 has warned organizations about Kali365, a Telegram-sold phishing-as-a-service kit that runs device-code phishing against Microsoft 365 — stealing the OAuth tokens issued after the victim genuinely passes MFA on Microsoft's real sign-in page.
Social Engineering
The Based Apparel merchandise site was pulled offline on May 22 after reports it served a ClickFix attack: a fake Cloudflare check whose copy button placed a hidden shell command on the clipboard for visitors to paste into their own terminal.
Vulnerabilities
Qualys disclosed CVE-2026-46333 — 'ssh-keysign-pwn' — a nine-year-old Linux kernel ptrace flaw that gives an unprivileged user root. Its defining feature is credential theft: the exploit captures SSH keys and shadow-file password hashes, so a patched kernel does not end the exposure.
Application Security
Norwegian researcher Tom Jøran Sønstebyseter Rønning of Statnett SF demonstrated at the Palo Alto Networks Norway BIG Bite of Tech conference that Microsoft Edge keeps every saved password loaded in plaintext RAM during a browser session. Microsoft's response: by design.
Cyber Attacks
Ukrainian police have arrested three individuals who systematically used stolen session cookies to access and sell more than 610,000 Roblox accounts, targeting profiles with accumulated in-game currency and rare items and reselling them through Russian criminal platforms for cryptocurrency. KYIV, UKRAINE — Ukrainian law enforcement has detained three suspects in
National Security
In a staggering display of poor digital hygiene, nearly 800 Hungarian government email accounts — including those belonging to national security and counter-terrorism experts — were found circulating online due to the use of easily guessable passwords. BUDAPEST, HU — Ahead of Hungary's high-stakes parliamentary elections scheduled for April 12, an
Trending
A newly identified threat actor, UNC6783, is bypassing the "front door" of major corporations by targeting Business Process Outsourcing (BPO) firms. By leveraging fake Okta portals and hijacked Zendesk tickets, the group has successfully extorted dozens of high-value targets, exposing a critical failure in the Managed Perimeter. MOUNTAIN
Data Breaches
PayPal has issued a series of security alerts following a wave of "unconventional" cyberattacks designed to compromise user accounts and exfiltrate sensitive financial data. The payments giant has confirmed that a significant credential stuffing campaign, alongside sophisticated phishing operations, has resulted in the exposure of personal information for
Cyber Attacks
Crunchyroll, the world’s largest anime streaming platform, has launched an investigation into claims that a threat actor has exfiltrated nearly 100GB of sensitive user data. The alleged breach was first brought to light after a prominent hacker group posted samples of the database on a known cybercrime forum, claiming
Cybersecurity 101
Credential stuffing is a type of cyberattack in which a cybercriminal uses stolen usernames and passwords from one organization to access user accounts at another organization. Credential stuffing has become one of the most widespread threats to modern authentication systems. This guide explains what credential stuffing is, how these attacks