ClickFix moves into the browser and onto WebDAV, Cisco Talos finds

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...
cyberpress

Hackers Abuse Legitimate Node.js Runtime to Hide Persistent Backdoor in Enterprise Attacks

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...
Tech Times on MSN

BigBear 2.0 Hacked 258 Microsoft 365 Organizations by Disabling Hardware Security Keys

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing ...