⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Call of Duty Mobile players should watch out for a phishing campaign disguised as a free Call of Duty Points giveaway. Victims are asked to log in with their email address and password to claim free Call of Duty Points (CP), the...
Call of Duty Mobile players are being targeted by a phishing scam that promises free Call of Duty Points (CP), the game’s premium currency. The fraudulent site mimics the official Call of Duty Mobile page, asking users to log in with their email and password, and then redirects them to a second page requesting their two-factor authentication (2FA) code.
Researchers published a working exploit called Certighost (CVE-2026-54121, CVSS 8.8) that lets low-privileged Active Directory users obtain a certificate for a Domain Controller and authenticate as that machine. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.
Google Threat Intelligence Group is rolling out a unified naming schema for threat actors, using cryptonyms with two-word combinations. The first word is unique and memorable, while the second categorizes by motivation or origin, aiming to improve intuition and standardization.
Google Threat Intelligence Group announces a unified naming schema for tracking threat actors, replacing separate systems from Mandiant and TAG. The update includes a table of new names for prominent actors to standardize public reporting.
Google Threat Intelligence Group is rolling out a unified naming schema for threat actors, using cryptonyms with two-word combinations. The first word is unique and memorable, while the second categorizes by motivation or origin, aiming to improve intuition and standardization.