
網路釣魚即服務平台Tycoon 2FA幕後黑手落網 跨國執法逮捕兩嫌
全球資安廠商趨勢科技協助追蹤「網路釣魚即服務」平台Tycoon 2FA,新加坡與巴基斯坦警方在國際刑警組織協調下,逮捕兩名涉嫌開發及營運該平台的嫌疑人,為跨國瓦解行動後的重要突破。

全球資安廠商趨勢科技協助追蹤「網路釣魚即服務」平台Tycoon 2FA,新加坡與巴基斯坦警方在國際刑警組織協調下,逮捕兩名涉嫌開發及營運該平台的嫌疑人,為跨國瓦解行動後的重要突破。

Researchers revealed how a vulnerability in Microsoft's M365 Copilot could be exploited to steal 2FA codes and sensitive data by tricking the AI into sending requests to attacker-controlled servers. Microsoft has patched the specific exploit, named SearchLeak, but the underlying issue of AI distinguishing user commands from malicious instructions remains.

Researchers revealed how a Microsoft 365 Copilot vulnerability allowed attackers to steal 2FA codes and sensitive data by tricking the AI into embedding malicious links in image URLs, which were then processed by Bing.

Startup dumb.co challenges smartphone addiction with 'dumbphones' through its Month Offline program, offering a middle ground between tech abstinence and moderation.

PlayStation Network'te (PSN) ortaya çıkan güvenlik açığı, bilgisayar korsanlarının sosyal mühendislik taktikleriyle 2FA korumasını aşarak hesapları ele geçirmesine olanak tanıyor. Eski IGN editörü Colin Moriarty'nin de başına gelen olayda, korsanlar müşteri hizmetlerini kandırarak e-posta adresini ve 2FA'yı devre dışı bırakıyor.

Google’s Threat Intelligence Group says it has “high confidence” a threat actor used an AI model to help discover and weaponize a vulnerability in a popular system admin tool.