Threat actors are increasingly exploiting account recovery workflows to circumvent MFA, turning service desk support into a primary target for identity theft.
Compromised non-human identities (NHIs) like AI agents and service accounts have surpassed phishing as the primary entry point for cyberattacks into organisations, a recent report indicates.
The ClickFix campaign has pivoted from OS-level commands to browser-based JavaScript injection, exploiting Google Sheets to steal cryptocurrency from unsuspecting users.
TeamPCP Hackers Arrested After Supply Chain Attacks Target More Than 1,000 Organizations Two Australians accused of being key members of the notorious TeamPCP cybercrime group have been arrested following an international investigation into a series of software supply chain attacks that allegedly compromised more than 1,000 organizations worldwide. Australian authorities arrested Ruben Ian Thomson, 21, […]
