A threat actor targeting Microsoft 365 and Azure production environments is stealing data in attacks that abuse legitimate ...
Storm-2949 turned stolen credentials into a cloud-wide breach, moving from identity compromise to large-scale data theft ...
Storm-2949 is engaged in a "methodical, sophisticated, and multi-layered" campaign ...
Supply chain attacks with a Dune sci-fi saga branding continue to spread across the open-source ecosystem, with a Microsoft ...
Attackers performed an email takeover attack on a dormant maintainer account and published new node-ipc versions containing ...
Tycoon2FA has returned with new device-code phishing attacks targeting Microsoft 365 users through legitimate OAuth login flows.
Cybersecurity researchers are sounding the alarm about what has been described as "malicious activity" in newly published ...
On 15 May 2026, Votee AI and Beever AI open-sourced Beever Atlas, turning Telegram, Discord, Teams and Slack chats into a ...
Cryptopolitan on MSN
Mini Shai-Hulud worm hijacks 323 npm packages under 30 minutes through a single stolen account
On May 19, the Mini Shai-Hulud worm compromised one npm maintainer account and pushed 639 malicious versions across 323 ...
Microsoft says Storm-2949 targets Microsoft 365 and Azure environments using MFA abuse, password resets, and cloud data theft ...
A security researcher claims Microsoft quietly fixed an Azure Backup for AKS vulnerability after rejecting his report, and ...
Microsoft disrupted Fox Tempest, a malware-signing service accused of abusing Azure certificates to disguise ransomware and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results