Cyber CrimeDNS Hijack Undercuts TLS Trust
Attackers seized three country-code domains to mint counterfeit TLS certificates for Google and other brands, Google says.
> Search
20 results for “hijacking”
Cyber Crime
SecurityPhaaS Campaign Targets IT Providers via M365 Phishing
CloudSEK reports BigBear 2.0 phishing operation stole over 5,100 Microsoft credentials, hitting IT firms hardest.
SecurityMikroTik routers under active attack via new SSH flaws
CERT Poland warns of active exploitation of two critical MikroTik RouterOS vulnerabilities, enabling full router hijacking.
Cyber CrimeNode.js Abuse Signals Shift in Malware Delivery
Threat actors are hijacking the trusted Node.js runtime to deliver malware, evading detection in targeted attacks since early 2026.
SecurityBGP hijack pushes malware via a 256-IP range
Attackers exploited routing and TLS flaws to abuse a hijacked /24 block in a 22-hour window.
SecurityAnthropic tackles Claude session hijacking via infostealers
Anthropic warns that infostealer malware is stealing Claude login sessions to drain accounts.
Cyber CrimeSession Theft Threat Escalates as 4,532 Firms Targeted
Mirage2FA campaign hit 4,532 companies, bypassing MFA and stealing sessions.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
SecurityChrome Targets Policy-Based Hijacking
Google's upcoming update aims to stop malware from using enterprise policy keys to seize control of user browser settings.
SecurityCaptiveCrunch Exploits Hospitality Wi-Fi
Threat actors are hijacking hotel network gateways to push fraudulent software updates and capture user credentials via deceptive portals.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
Cyber CrimeRussian Intel Targets NATO Logistics
Intelligence agencies report that Russian actors are hijacking IP cameras to monitor military movements across Europe and Ukraine.
SecurityUrwid Session Hijack Vulnerability Found
A critical flaw in the Urwid web display backend allows attackers to predict session identifiers and compromise local terminal access.
SecurityUrwid Session Hijacking Vulnerability
A critical flaw in the Urwid web display backend allows attackers to predict session IDs and gain unauthorized terminal access.
SecuritySession Hijacking in Urwid Web Backend
A critical vulnerability in the Urwid display backend allows attackers to hijack active sessions through PRNG prediction or local access.
SecurityCVE-2026-9323 Exposes Urwid Sessions
A critical flaw in the Urwid web display backend allows session hijacking via predictable identifiers and insecure file handling.
SecurityNadMesh Botnet Turns AI Tools Into Hooks
A newly identified Go-based botnet is pivoting from simple compute-hijacking to harvesting cloud credentials from exposed AI services.
Securityn8n Authentication Flaw Risks Hijacking
A critical identity-binding bug in n8n's token exchange feature allowed unauthorized account access by ignoring multi-issuer constraints.
SecurityZoom Account Takeover Threat Revealed
A critical 9.8 severity vulnerability in Zoom's Windows desktop client exposes millions of users to potential account hijacking.
SecurityThe Hidden Dangers Lurking Within Everyday QR Code Scams
Quishing attacks are weaponizing QR codes to bypass traditional security, creating a sophisticated new pathway for account hijacking.