Microsoft Warns of Passkey-Themed Phishing and Cloud Identity Compromise
Microsoft has recorded active intrusions into cloud accounts in which attackers exploit phone calls and text messages with urgent requests to change a passkey or MFA.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Resolved: GitHub – Incident Affecting Multiple GitHub Services
GitHub: Incident affecting multiple GitHub services. The incident is resolved.
Anthropic: Alleged ShinyHunters Affiliates Scanned 1.8 Million Android APKs
Anthropic describes financially motivated activity by alleged ShinyHunters affiliates in which an operator downloaded, decompiled and checked 1.8 million Android applications. The target was hardcoded credentials.
Fake Government Request Led to Revolut Customer Data Being Handed Over
According to customer notifications, Revolut complied with a fake request posing as a government demand. Potentially disclosed data includes identity documents, IBAN details and transaction history, including Bitcoin activity.
FLHSMV Confirms Incident Linked to Police User Account
Florida’s transportation agency confirmed unauthorized access linked to the credentials of a Plant City Police Department user. It has not yet disclosed the scope of the affected data.
Proofpoint Documents BlueMoon, an Exploit Kit Chaining Chrome and Windows Vulnerabilities
Proofpoint researchers observed the BlueMoon exploit kit in targeted phishing campaigns. The chain exploits Chrome/V8 flaws and Windows privilege escalation; patches are available.
JFrog Artifactory: CISA Adds Two Vulnerabilities to Known Exploited List
CISA added CVE-2026-42016 and CVE-2026-42018 in self-hosted JFrog Artifactory to the KEV Catalog. Wiz observed them being chained, which may lead to administrative access.
CISA Adds ConnectWise ScreenConnect Vulnerability to Exploited List
CISA has recorded active exploitation of CVE-2026-84869 in ConnectWise ScreenConnect. A fix is available in version 26.6.5.
Phishing Campaign Exploited Trezor’s Brevo Newsletter Account
An attacker exploited Trezor’s account with newsletter service Brevo. The phishing email urged recipients to download an app and enter their wallet seed.
Anthropic Disrupts Espionage Operation That Used Claude in Cyberattacks
Anthropic says it blocked accounts linked to the GTG-20006 group, which allegedly used Claude to automate parts of espionage attacks against targets in Ukraine and Europe.