#hijacking.


ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories

Jul 9, 2026 // 18:15

Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because […]

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

Jul 2, 2026 // 18:26

This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. […]

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

Jun 22, 2026 // 15:04

Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still not accounting for […]

French govt messaging service breached in account hijacking attack

Jun 9, 2026 // 14:17

DINUM, the digital affairs directorate of the French government, warned that hackers used a hijacked user account to breach Tchap, the French government’s encrypted messaging platform. […]

Max-severity flaw in ChromaDB for AI apps allows server hijacking

May 20, 2026 // 01:36

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. The flaw […]

Axios npm package compromised via forged Teams error solution, leading to maintainer account hijacking.

Apr 5, 2026 // 10:37

The people in charge of the well-known Axios HTTP client have shared a detailed report about how a developer was tricked by a social engineering […]