· it
ConsentFix debrief: Insights from the new OAuth phishing attack
ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push Security shares new insights from continu...
-
- · it
PSA: Instagram password reset emails should be ignored
If you’ve received an Instagram password reset email, claiming that you requested it, you should ignore it. Malwarebytes reports that cybercriminals stole Insta...
- · it
Betterment’s financial app sends customers a $10,000 crypto scam message
Betterment, a financial app, sent a sketchy-looking notification on Friday asking users to send $10,000 to Bitcoin and Ethereum crypto wallets and promising to...
- · it
Security news weekly round-up - 2nd January 2026
LinkedIn Job Scam – Global Threat When your instincts tell you that a job posting might be a scam, trust them and walk away. Falling for the bait can result in...
- · it
LinkedIn Job Scams
Interesting article on the variety of LinkedIn job scams around the world: In India, tech jobs are used as bait because the industry employs millions of people...
- · it
Security news weekly round-up - 26th December 2025
Stealth in Layers: Unmasking the Loader used in Targeted Email Campaigns Read the full articlehttps://cyble.com/blog/stealth-in-layers-unmasking-loader-in-targ...
- · it
Most parked domains now serving malicious content
Article URL: https://krebsonsecurity.com/2025/12/most-parked-domains-now-serving-malicious-content/ Comments URL: https://news.ycombinator.com/item?id=46312021...
- · it
Most Parked Domains Now Serving Malicious Content
Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast major...
- · it
Security news weekly round-up - 12th December 2025
Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails Read the full articlehttps://thehackernews.com/2025/12/zero-click-agentic...
- · it
New wave of fake job scams impersonating recruiters
Job seekers are being targeted by scammers impersonating recruiters at tech companies, including GitLab, through email, LinkedIn, and video conferencing platfor...
- · it
SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time...
- · it
Advent of Cyber 2025: Day 2 Writeup | TryHackMe
Setup - TryHackMe provides a GUI Attackbox 1 hour daily and an unrestricted Targetbox. - You can also use your own laptop or a Linux VM in VirtualBox as the At...