Fake Microsoft Entra Passkey Phishing Targets M365 Users
Attackers use voice-based social engineering to trick users into enrolling fake passkeys. This grants unauthorized access to Microsoft 365 accounts for data extortion.
Read moreBlog
Security insights, vulnerability roundups, and updates from the Agent Breach team.
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
Free Android VPN Apps Expose User Traffic, Study Reveals
Research on 281 popular free Android VPNs reveals widespread privacy failures. Many apps leak traffic or transmit data unencrypted.
Read moreExposed Hacker Server Reveals Mass WordPress Backdoor Campaign
A misconfigured server exposed a cybercriminal operation targeting over 1.4 million WordPress sites. Researchers gained rare insight into the tools and methods used for large-scale website compromises.
Read moreScaling Asset Visibility: Lumen's Security Inventory Transformation
Lumen Technologies scaled its asset inventory from 17,000 to over 1.1 million items, revealing critical gaps in enterprise visibility. Accurate asset management is foundational for effective cybersecurity programs.
Read moreJoomla Extensions Exploited as Zero-Days Added to CISA KEV Catalog
Two critical Joomla extensions, iCagenda and Balbooa Forms, are under active exploitation as zero-days. CISA has added these vulnerabilities to its Known Exploited Vulnerabilities catalog.
Read moreCritical XRING Flaw in XQUIC Library Exposes HTTP/3 Servers to Crashes
A zero-day vulnerability in Alibaba's XQUIC library allows remote attackers to crash HTTP/3 servers with minimal traffic. No patch is currently available.
Read moreMODBEACON RAT Leverages gRPC for Stealthy Command and Control
A new Rust-based remote access trojan dubbed MODBEACON is being used by the China-linked Silver Fox group. It employs gRPC streaming to encrypt its command-and-control traffic, evading traditional detection methods.
Read moreWhatsApp-to-Host Attack via OpenClaw AI Assistant Flaws
Three high-severity vulnerabilities in OpenClaw AI assistant could lead to credential theft and remote code execution. These flaws highlight risks in AI-powered personal assistants.
Read moreState-Backed Hackers Exploit Balochistan Police Web Portals
Multiple advanced persistent threat groups linked to China and India targeted Pakistani law enforcement infrastructure over a two-year campaign. The attacks compromised servers handling sensitive police and citizen data through weaponized web applications.
Read moreMalicious jscrambler npm Package Deploys Cross-Platform Infostealer
The jscrambler 8.14.0 npm release was compromised to drop a Rust-based infostealer during installation. Security monitoring detected the threat within minutes.
Read more