OAuth 2.0 Exploited: Russian Threat Actors Hijack Microsoft 365 Accounts
In a sophisticated phishing campaign, Russian hackers are leveraging OAuth 2.0 workflows to compromise Microsoft 365 accounts, targeting organizations related to Ukraine. Through social engineering ta...
https://news.lavx.hu/article/oauth-2-0-exploited-russian-threat-actors-hijack-microsoft-365-accounts
Genetic privacy alert: 23andMe’s bankruptcy puts your DNA data at risk 
With user data now part of potential asset sales, EFF is urging all customers to act now:
Download your data — store it securely for personal use
Delete your account + data — this includes reports, raw data, and family tree connections
Revoke research consent — and explicitly request sample destruction
Why it matters:
• DNA reveals more than identity — it exposes health, ancestry, and family connections
• The data doesn’t just belong to you — it can implicate relatives who never opted in
• A new owner might not respect your privacy
Take control now. Your genes deserve better security than a bankruptcy fire sale.
#Privacy #DNA #DataRights #CyberSecurity #23andMe #DigitalRisk #security #privacy #cloud #infosec
https://www.eff.org/deeplinks/2025/03/how-delete-your-23andme-data
"Inherent security flaws are raising questions about the safety of AI systems built on the Model Context Protocol (MCP).
Developed by Anthropic, MCP is an open source specification for connecting large language model-based AI agents with external data sources — called MCP servers.
As the first proposed industry standard for agent-to-API communication, interest in MCP has surged in recent months, leading to an explosion in MCP servers.
In recent weeks, developers have sounded the alarm that MCP lacks default authentication and isn’t secure out of the box — some say it’s a security nightmare.
Recent research from Invariant Labs shows that MCP servers are vulnerable to tool poisoning attacks, in which untrusted servers embed hidden instructions in tool descriptions.
Anthropic, OpenAI, Cursor, Zapier, and other MCP clients are susceptible to this type of attack..."
https://thenewstack.io/building-with-mcp-mind-the-security-gaps/
Security by design isn’t a tagline for Microsoft anymore — it’s part of employee performance reviews.
In its latest Secure Future Initiative (SFI) Progress Report, Microsoft shared updates on its internal transformation to embed security across engineering, identity, operations, and culture. This follows heavy criticism from the U.S. Cyber Safety Review Board (CSRB) after a series of breaches in 2023 and 2024 — including the Storm-0558 and Midnight Blizzard incidents.
Key takeaways from the report:
- Every Microsoft employee now has a “Security Core Priority” tracked in annual performance reviews
- Over 34,000 engineers have worked full-time on SFI-related security tasks over the past 11 months
- 92% of employee productivity accounts now use phishing-resistant MFA
- 90% of identity tokens from Entra ID are validated by a unified SDK
- All 14 Deputy CISOs completed risk inventories across their respective products or functions
Microsoft also released a new Secure by Design UX Toolkit, rolled out internally to 22,000 employees and made publicly available to help teams prevent user-targeted attacks through clearer, more secure interfaces.
The company says five of its 28 SFI objectives are near completion, with meaningful progress made on 11 others.
SFI was launched in late 2023 with three foundational principles:
- Secure by design
- Secure by default
- Secure operations
The push came after the CSRB called Microsoft’s security culture “inadequate” — especially after the July 2023 Chinese nation-state breach, where a stolen MSA signing key allowed attackers to access U.S. government email accounts. Since then, Microsoft has pledged to rebuild trust from the inside out, starting with its own development and operational teams.
But critics remain skeptical. Security researchers have called out Microsoft for inconsistent communication, patch quality, and vulnerability handling. Some argue the company’s day-to-day security execution has worsened despite its strategic goals.
Still, others believe the cultural shift is real — even if results will take years to materialize.
At @Efani, we believe transparency and measurable change matter more than slogans. Security culture starts with leadership but lives in how every product is designed, monitored, and updated. Microsoft’s progress is a reminder that no company is immune from its own architecture.
Possible Phishing 
on: hxxp[:]//www[.]bkinghotel[.]life/
Analysis at: https://urldna.io/scan/680676103b7750000ba30b5a
#cybersecurity #phishing #infosec #urldna #scam #infosec
"The office of Hannah Neumann, a member of the German Greens and head of the delegation spearheading work on European Union-Iran relations, was targeted by a hacking campaign that started in January, she said. Her staff was contacted with messages, phone calls and emails by hackers impersonating a legitimate contact. They eventually managed to target a laptop with malicious software.
"It was a very sophisticated attempt using various ways to manage that someone accidentally opens a link, including putting personal pressure on them," Neumann said.
Neumann was made aware of the ongoing ploy four weeks ago by the German domestic intelligence service, she said.
The group thought to be behind the attack is a hacking collective associated with the Iranian Revolutionary Guard, known as APT42, according to a report by the Parliament’s in-house IT service DG ITEC and seen by POLITICO. Another Iranian hacking group, called APT35 or Charming Kitten, was initially considered a culprit too. The two Iranian threat groups are closely related."
I have been working on a terminal-based password generator that pulls real system noise and uses cryptographic techniques to forge high-entropy passwords.
Built with Go + Bubbletea.
Crosswalk hacks, rising brute force attacks, and the hidden gem in Windows: Sandbox! @SGgrc & @leo break it all down on Security Now 1022.
#CyberSecurity #WindowsTips
Download and subscribe here:
https://twit.tv/shows/security-now/episodes/1022
Possible Phishing
on: hxxps[:]//claim-pepeto[.]com
Analysis at: https://urldna.io/scan/680713373b7750000c69773c
#cybersecurity #phishing #infosec #urldna #scam #infosec
Whoa, folks, it's wild how quickly exploits are hitting the streets these days. 
Seriously, a recent VulnCheck report confirms that CVEs are getting weaponized *way* faster than before. It looks like Content Management Systems (CMS) and network gear are becoming prime targets, and open-source projects aren't escaping the heat either. Keep an extra close eye on systems from Microsoft, VMware, CyberPower, and TOTOLINK – they seem to be particularly in the crosshairs right now!
So, what's the takeaway? You absolutely *have* to stay on top of patching. Automated scans? Sure, they're a decent starting point, but honestly, proper penetration testing isn't just nice-to-have anymore, it's essential. That old phrase "Trust but Verify"? Yeah, it rings truer than ever in cybersecurity today.
Let's talk reality: what are your biggest headaches when it comes to patch management? 
Drop your thoughts below!
Whoa, hold up! 
There's a new Linux rootkit dubbed "Curing" out in the wild, and it's got a nasty trick: leveraging `io_uring` to slip right past traditional security tools. Why? Because most of those tools are laser-focused on system calls... which `io_uring` can bypass.
So, what's the deal with `io_uring`? Picture an application chatting directly with the kernel, essentially skipping the front desk where system calls usually check-in. "Curing" exploits this direct line for its command-and-control communication, leaving *none* of the usual suspicious system call footprints. Talk about stealth mode! And heads up – Google has actually been warning about the potential risks here for some time.
Speaking from a pentester's perspective, this is yet another stark reminder: just relying on "basic" security isn't going to cut it. We really need to dive deeper, get our hands dirty with kernel-level analysis and understanding. Let's be clear: running automated scans is *not* the same as a thorough penetration test!
What about you? Are you utilizing `io_uring` in your environment? What kind of security measures have you put in place around it? Seriously curious – how do you see kernel security evolving from here? Let's discuss! 
A supply chain attack hit the XRP Ledger SDK via NPM, stealing private keys through rogue updates.
Read: https://hackread.com/backdoor-found-in-official-xrp-ledger-npm-package/
Possible Phishing
on: hxxps[:]//web[.]vazados[.]club/jejeum-intermitente
Analysis at: https://urldna.io/scan/68067a3a3b7750000c1f5e92
#cybersecurity #phishing #infosec #urldna #scam #infosec
#GoEuropean: mailbox(dot)org offer for switching to the European alternative
Backdoor Found in Official XRP Ledger NPM Package https://hackread.com/backdoor-found-in-official-xrp-ledger-npm-package/ #Cybersecurity #Security #backdoor #Malware #Ledger #Scam #NPM #XRP
Blue Shield Leaked Millions of Patient Info to Google for Years https://hackread.com/blue-shield-leaked-millions-patient-info-google-years/ #GoogleAnalytics #Cybersecurity #BlueShield #databreach #Security #Privacy #Google
New SessionShark Phishing Kit Bypasses MFA to Steal Office 365 Logins https://hackread.com/sessionshark-phishing-kit-bypass-mfa-steal-office-365-logins/ #Cybersecurity #PhishingScam #SessionShark #CyberAttack #PhishingKit #Office365 #Security #Phishing #MFA
Securing Fintech Operations Through Smarter Controls and Automation https://hackread.com/securing-fintech-operations-smarter-controls-automation/ #Cybersecurity #Technology #Automation #Fintech
Elusive Comet Attack: Hackers Use Zoom Remote-Control to Steal Crypto https://hackread.com/elusive-comet-hackers-zoom-remote-control-steal-crypto/ #Cryptocurrency #ScamsandFraud #Cybersecurity #Vulnerability #ElusiveComet #CyberAttack #Blockchain #CyberCrime #Security #Malware #Crypto #Fraud #Scam
Get ready for an amazing time at #OWASP Global #AppSec EU in May! Elevate your experience by becoming a mentor. Forge lasting connections and help others grow throughout the year. Join us now to get involved: https://owasp.wufoo.com/forms/zk2cdkr1qla6o8/ 
#CyberSecurity #AI #threatmodeling #Barcelona #devsecops
mastodon uno admin 
