Security boffin claims airport group left API keys in client-side JavaScript for four years

Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion ...
cyberpress

ClickFix Campaign Abuses Google Sheets C2 to Inject Malicious JavaScript Into Chrome

Cisco Talos has uncovered a cryptocurrency theft campaign that abuses Google Sheets and the Google Visualization API as a ...
Cyber Security News

Hackers Actively Exploiting FortiGate Firewalls to Deploy Custom Node.js Malware

An active exploitation campaign targeting FortiGate firewalls, in which attackers weaponize a critical vulnerability to plant ...
Tech Times

BigBear 2.0 Hacked 258 Microsoft 365 Organizations by Disabling Hardware Security Keys

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing authen ...
cyberpress

BigBear 2.0 Phishing Campaign Hijacks Microsoft 365 Sessions to Bypass MFA

First identified in June 2026, the operation targeted Microsoft 365 users and was reportedly still active during the ...