SecurityOAuth abuse emerges as Workspace breach path
A webinar will examine two attacks that used malicious OAuth apps and social engineering to breach Google Workspace environments.
> Search
30 results for “soc”
Security
Cyber CrimeTwitch Extension Token Leak Hits 31K Users
A cross-store Twitch extension sent OAuth tokens for roughly 31,000 users to operator proxies, Socket reports.
Cyber CrimeRevolut breach spotlights ID verification gaps
A fintech breach via fake government emails exposes sensitive customer data, raising questions about verification controls.
Cyber CrimePasskey phishing opens M365 data theft playbook
Microsoft ties passkey-themed social engineering to extortion gangs that blend into Microsoft 365 traffic to steal files and email.
Cyber CrimeClickFix Goes Mainstream, Hits PCs and Macs
ClickFix attacks have spread from exotic to mainstream, infecting Windows and macOS users via fake CAPTCHAs and terminal commands.
Cyber CrimeSpending Spree Unravels $240M Crypto Heist
Young scammers' lavish purchases led FBI to suspects in $240M bitcoin theft.
Tech NewsVenture Cash Meets Military Boom in SoCal
Defense contracts in LA County doubled in 10 years as startups and venture capital reshape aerospace.
Cyber CrimeRMM Phishing Campaign Zeroes In on US Targets
A phishing campaign spanning 46 countries uses fake documents to push RMM tools, with 45% of activity aimed at the US.
AI & MLOllie's Privacy-First Pitch in the AI Assistant Race
Can SOC 2 compliance and a subscription model differentiate Ollie in a crowded AI assistant market?
Cyber CrimePegasus iMessage Attack Targets Serbian Student Activist
Citizen Lab finds NSO Group spyware on an activist's iPhone via a zero-click exploit, highlighting ongoing surveillance of Serbian civil society.
SecurityBrowser extensions turn into supply chain risk
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
SecurityTerminalFix Malware Exploits Fake CAPTCHAs
Microsoft warns of TerminalFix ClickFix variant that tricks users into running malicious PowerShell commands via fake Cloudflare checks.
SecurityIoT Botnets and Water Systems Top ThreatsDay
A weekly roundup: 296K-device botnet, 100+ water systems targeted, and a SharePoint RCE chain.
Tech NewsMeta's $18B Settlement Puts Teen Safety Rules to the Test
Meta settles teen-harm suit for $18B, promising sweeping Instagram and Facebook changes that may prove nearly impossible to enforce.
SecurityLACMA Breach Exposed Sensitive Data
LACMA's 2025 breach exposed social security and medical data; notifications sent.
SecurityIdentity Checks Become the Weak Link
Attackers shift focus from login to onboarding and account recovery, exploiting weak identity verification.
SecurityLimited Breach: ReliaQuest Confirms Hack
ReliaQuest says ShinyHunters accessed an identity dashboard briefly but no customer data was compromised.
SecurityAI Assistance Moves Into SOC Workflows
Wazuh adds AI-powered analyst tools and integrations to ease security operations workload.
Tech NewsTikTok's payment push signals super-app ambitions
TikTok is developing a feature to let users send money via DMs, code hidden in its iPhone app suggests, according to a Bloomberg report.
Tech NewsReddit tests narrated video and audio posts
Reddit begins testing a new audio and video experience for select posts, similar to TikTok-style narrated stories.
SecurityModem Memory Flaw Opens Door to Kernel Takeover
UNISOC modem flaw lets attackers escalate code execution to kernel level via video calls.
SecurityVoLTE Attack Chain Threatens Android Kernel Security
A two-stage exploit chain can achieve full Android kernel access on Unisoc devices via VoLTE video call, with no patch.
SecurityWhy 2,500-Org Breach Wasn't What It Seemed
SOCRadar says most orgs hit in LiteLLM attack were earlier Trivy victims, not LiteLLM.
Cyber CrimeEvooo1Bot Botnet Weaponizes Edge Device Flaws
A new Mirai-based Linux botnet uses encrypted C2, SOCKS proxies, and exploits in routers to hijack edge devices.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
Tech NewsBluesky's open web bet gets its Disrupt test
Bluesky's new CEO and COO will argue open protocols can reboot social media at TechCrunch Disrupt 2026.
Cyber CrimeFake VPN Extensions Hijack Traffic
Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.
SecurityZero-Day in Windows Winsock Kernel Driver Exploited in Attacks
Microsoft's August Patch Tuesday fixes 421 CVEs, including one exploited zero-day and two publicly disclosed flaws.
Tech News9th Circuit Clears Path for Addiction Suits
Appeals court denies platforms' Section 230 bid, allowing thousands of addiction lawsuits to proceed.
SecurityLevi's Breach Exposes Social Engineering Threat
Levi Strauss investigates a breach after attackers used social engineering to access employee PCs and exfiltrate corporate data.