WooCommerce admins targeted by fake security patches that hijack sitesBy [email protected]April 28, 20250 A large-scale phishing campaign targets WooCommerce users with a fake security alert urging them to download a “critical patch” that adds a…
Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accountsBy [email protected]April 25, 20250 Russian threat actors have been abusing legitimate OAuth 2.0 authentication workflows to hijack Microsoft 365 accounts of employees of organizations related…
