#link


Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

Oct 15, 2026 // 23:06

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate […]

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Sep 26, 2026 // 13:38

Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create […]

MFA’s Weakest Link: Account Recovery Is the New Attack Path

Sep 9, 2026 // 17:16

For years, security teams have been making account takeover harder. Multi-factor authentication (MFA) added crucial protection to password-only authentication, while conditional access and device trust […]

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Jul 24, 2026 // 15:00

Cybersecurity researchers have disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and […]

Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs

May 6, 2026 // 11:34

Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (RAT) and a previous undocumented plugin dubbed […]

CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs

May 5, 2026 // 13:17

A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called Pheno that hijacks the Microsoft Phone Link […]

macOS App Security Revoked After OpenAI Supply Chain Hack, Axios Link.

Apr 13, 2026 // 10:18

OpenAI shared details about a GitHub Actions process used for signing their macOS applications. This process downloaded the harmful Axios library on March 31st. They […]

German police link REvil leaders to 130 ransomware attacks in Germany.

Apr 6, 2026 // 10:27

The German police (BKA) have identified the person behind the major players in the defunct REvil ransomware operation (also known as Sodinokibi), which was a […]