Skip to content

ADMIN.FOUNDATION

  • Stolen Greatness Tokens Provide Microsoft 365 Access More Than Two Weeks After Phishing

    ·

    cyber security, Cyber Security News, Microsoft

    Stolen Greatness authentication tokens are providing sustained, MFA‑approved access to victim Microsoft 365 tenants for more than two weeks after the initial phish, underscoring that token replay – not password theft – is driving the persistence in this AiTM PhaaS ecosystem. Originally documented by Cisco Talos in May 2023 and further covered by Hornet Security, […]

    The post Stolen Greatness Tokens Provide Microsoft 365 Access More Than Two Weeks After Phishing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Paid Record $20 Million in Bug Bounties to 562 Security Researchers Worldwide

    ·

    cyber security, Cyber Security News, Microsoft

    Microsoft’s Bug Bounty Program awarded over $20 million to 562 security researchers this year, marking the highest total payout and the largest number of recognized researchers in the program’s history. Contributors hailed from 64 countries, highlighting the global nature of coordinated vulnerability disclosure efforts that help protect Microsoft customers worldwide. This represents significant growth over […]

    The post Microsoft Paid Record $20 Million in Bug Bounties to 562 Security Researchers Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

    ·

    Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer. The new dead drop resolver approach, observed in two trojanized npm package “bianira-ui” and “fluid-type-ui,” has been codenamed NullReceiver by

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OVSwrap Open vSwitch Flaw Lets Unprivileged Linux Users Gain Root Access

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Linux, vulnerability

    A recently disclosed Linux local privilege-escalation vulnerability, tracked as CVE-2026-64531 and referred to as OVSwrap, affects the kernel’s Open vSwitch (OVS) implementation. This vulnerability could allow unprivileged local users to gain root-level access on affected systems. Researcher Asim Viladi Oglu Manizada reported this issue on July 28 after coordinating with the Linux kernel security team […]

    The post OVSwrap Open vSwitch Flaw Lets Unprivileged Linux Users Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable

    ·

    CISO, Press Release, Research
    Las Vegas, United States, 5th August 2026, CyberNewswire

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • History of Hacking: The ILOVEYOU Computer Worm

    ·

    Blogs
    This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Aug. 4, 2026

    – Watch the YouTube short

    “ILOVEYOU“, sometimes referred to as the Love Bug or Loveletter, was a computer worm that infected tens of millions of Windows computers following its release on May 4, 2000.

    People around the world were sent the same “love letter” in an email. However, instead of words of affection, those who opened the attachment received a destructive, self-spreading computer worm.

    It is estimated that the virus infected about 45 million machines in 24 hours, leaving email systems overwhelmed and prompting panicked IT managers to disconnect parts of their infrastructure to protect operations.

    Onel de Guzman, a 23-year-old Filipino, was the man who unleashed the Love Bug virus to steal passwords that would allow him to gain access to the internet for free. Now aged 50, he said that he never meant for his creation to spread so rapidly and cause disruption across the world.

    The virus was a wake-up call for governments and populations that had become complacent to the dangers posed by malicious cyber actors. More than 25 years later, Love Bug remains one of the farthest-reaching viruses.

    Taylor Fox, Senior Social Media Manager at Cybercrime Magazine, dives into the ILOVEYOU virus in our latest YouTube Short video on the history of hacking.

    Watch the Video



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post History of Hacking: The ILOVEYOU Computer Worm appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Uppsala Security Becomes First Blockchain Intelligence Company to Join Cyber Threat Alliance

    ·

    Blockchain, Press Release
    SIngapore, Singapore, 5th August 2026, CyberNewswire

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

    ·

    A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS score: 7.8) and codenamed OVSwrap by its discoverer, was disclosed by security researcher Asim

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

    ·

    Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft’s real authentication page. Once access and refresh tokens are issued, attackers may retain access to email, documents, and cloud resources, creating a direct path to data exposure, financial fraud,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

    ·

    An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. The flaw is fixed in Gitea 1.27.1. The file-read flaw is tracked as CVE-2026-59774, rated Critical with a CVSS score of 9.8, and received its

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 220 221 222 223 224 … 1,231
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence