Skip to content
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Cybersecurity researchers have called attention to an active “widespread email-driven phishing campaign” that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with an aim to identify key personnel involved in financial workflows… 

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

Swati KhandelwalAug 07, 2026Web Security / Vulnerability PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate desync vectors. PortSwigger… 

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

Swati KhandelwalAug 07, 2026Network Security / Vulnerability Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped… 

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim’s Windows Hello for Business key to authenticate to… 

TerraMaster F4-425 Pro NAS review: Very fast, with backup, surveillance, and media streaming galore

TerraMaster F4-425 Pro NAS review: Very fast, with backup, surveillance, and media streaming galore

At a glance Expert’s Rating Pros Affordable for four bays Dual 5Gbe connections Tons of apps and capabilities Excellent performance Unlimited IP cams in surveillance app Cons Drive trays don’t lock Requires mail address during… 

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

Swati KhandelwalAug 07, 2026Artificial Intelligence / Vulnerability A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic’s and Google’s own coding-agent repositories. On…