ASOS links data breach to social engineering attack, credential theft Source: BleepingComputer ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data. […] Read original
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes Source: The Hacker News Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campai Read original
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes Source: The Hacker News Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campai Read original
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Source: The Hacker News Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be e Read original
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Source: The Hacker News Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be e Read original
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Source: The Hacker News Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be e Read original
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Source: The Hacker News Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be e Read original
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions Source: The Hacker News Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead of publication Read original
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions Source: The Hacker News Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead of publication Read original
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions Source: The Hacker News Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead of publication Read original