Identity, Access & Credentials

Flying Eagle mobile RAT-as-a-service enables multiple groups to build Android infostealers that drain victims' banking credentials.

Numerous internet-exposed remote hardware management controllers are vulnerable to offline password cracking and takeover attempts.

Microsoft patched a high-severity Certighost AD Certificate Services flaw that enables privilege escalation and domain compromise.

Researchers found 24,650 internet-exposed BMC/IPMI interfaces disclosing password-derived hashes before login, enabling offline cracking.

Insurance-targeted phishing now triggers immediate real-time account hijacking rather than delayed credential theft for timely money transfer fraud.

Russian state-linked actors exploited a Zimbra zero-day to steal emails and bypass MFA, prompting urgent patching and mitigations.

Dolphin X infostealer uses AI profiling to rank infected users, prioritizing high-value targets for exfiltration and fraud.

Two Scattered Spider members jailed for a 2024 attack disrupting 148 TfL systems and forcing 27,000 staff password resets.

Attackers exploited Laravel Livewire CVE-2025-54068 to run PHP deserialization payloads and steal credentials and secrets at scale.

Directory listing on misconfigured server exposed three Evilginx phishing operations that bypass MFA to target Microsoft 365 users.

Novel OAuth client ID spoofing enables attackers to validate stolen Microsoft Entra credentials and enumerate accounts while evading telemetry.

Jalisco and OmegaLord phishing kits target Microsoft 365, using MFA-evasion techniques to steal credentials and session tokens.

Rise in deceptive QR-code scams leading to credential theft, fraudulent payments and account takeover attempts.

Malicious jscrambler npm v8.14.0 runs a preinstall hook that drops a cross-platform Rust infostealer during package install.

Critical Dell BIOS weakness (CVE-2026-40639) allows instant admin-password recovery from SPI flash, risking device takeover and firmware abuse.