Attackers Hijack Microsoft 365 Accounts Through OAuth Device Code Abuse Without Stealing Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Analysts at ANY.RUN has identified a sharp spike in phishing campaigns exploiting Microsoft’s OAuth Device Authorization Grant flow, with more than 180 malicious URLs detected within a single week. Unlike …

Critical MediaTek Vulnerability Lets Attackers Steal Android Phone PINs in 45 Seconds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the MediaTek Dimensity 7300 chipset allows a physical attacker to extract device PINs, decrypt on-device storage, and steal cryptocurrency wallet seed phrases in approximately 45 seconds, …

Microsoft Copilot Email and Teams Summarization Vulnerability Enables Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI assistants have rapidly transformed daily operations, streamlining tasks for teams managing overloaded inboxes, client communications, and incident response. Tools like Microsoft Copilot integrate directly into daily workflows, summarizing emails …

Paloalto Cortex XDR Broker Vulnerability Attackers to Obtain and Modify Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Paloalto Cortex XDR Broker Vulnerability A security advisory has been issued for a newly discovered vulnerability affecting the Cortex XDR Broker Virtual Machine (VM). This flaw could allow a highly …

Ericsson US Discloses Data Breach – Hackers Stolen Employees and Customers Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ericsson Data Breach The U.S. subsidiary of a Swedish telecommunications multinational has disclosed a data breach exposing the personal information of employees and customers. The incident did not occur on …

Cisco IOS XR Software Vulnerability Allow Attacker to Execute Commands as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

cisco-ios-xr-software-vulnerability Cisco has issued a high-severity security advisory warning organizations about two critical privilege-escalation vulnerabilities in its IOS XR Software. If exploited, these flaws could allow an authenticated, local attacker …

Splunk RCE Vulnerability Allows Attackers to Execute Arbitrary Shell Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Splunk RCE Vulnerability A critical security advisory has been released, warning users of a high-severity vulnerability affecting both Enterprise and Cloud platforms. Tracked as CVE-2026-20163, this flaw carries a CVSS …

SolarWinds Web Help Desk Deserialization Vulnerability Enables Command Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity authorities have flagged a severe security flaw in SolarWinds Web Help Desk that requires immediate attention from system administrators. Tracked as CVE-2025-26399, this vulnerability allows malicious actors to execute …

Critical Microsoft Office Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Office Vulnerability On March 10, 2026, Microsoft released security updates to address a critical vulnerability in its widely used Office suite. Tracked as CVE-2026-26110, this security flaw allows an …