ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

Source: The Hacker News

Overview

Every time you think the industry has finally stopped doing some reckless, low‑effort crap, somebody spins up a fresh box full of sketchy loaders, fake installers, recycled social‑engineering bait, and enough exposed infrastructure to make you wonder if prod is just a public beta now — meanwhile a researcher casually drops a technique that turns a “minor” foothold into total account.