The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۲۱

Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign

Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link came back clean, and the operator designed it that way on purpose. The Threat Research team at Material Security spotted the campaign and has since taken down hundreds of attacker domains in an effort the team calls Operation CloudFire.

Phishing

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۳۹

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The company has already applied mitigations against attacks between VMs, and between VMs and the host. Inside a VM, the flaws may let an attacker with code on the same processor core infer data from other processes or the kernel. The affected

Data Breach Cloud Computing Operating Systems

Source

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۳۲

Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them

Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what can they access? A suspicious login might belong to an employee. An unusual API call could come from a machine account. Or an AI agent might be accessing sensitive systems using permissions nobody

Incident Response & Forensics

Source

SOCRadar پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۳۲

Dark Web Profile: n0n Ransomware

n0n is a data-exfiltration and destructive-extortion group that surfaced on the Dark Web in September 2026 and scaled to 93 listed victims within roughly five weeks. Its operators exfiltrate data, encrypt or destroy infrastructure, and then work victims through keyed negotiation rooms, per-victim Bitcoin wallets and a public leak site branded with the slogan “n0n […]

Malware & Threats Vulnerabilities & Zero-Day Phishing

Source

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۲۱

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

N-able on Thursday said it's investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2. "Based on our initial review, the server issue described depends on a non-default configuration in which the Legacy API is turned on and exposed to the public internet," N-able said in a new advisory. "Legacy API is

Vulnerabilities & Zero-Day Operating Systems

Source