Global coalition dismantles Tycoon 2FA phishing kitCyberScoop·Mar 5, 00:01 UTC · Mar 5, 2026Phishing & fraud in the wild60
Hackers target 'hundreds' of Middle East activists with fake login pages, 2FA bypass schemesCyberScoop·Dec 19, 18:47 UTC · Dec 19, 2018Exploit / PoC in the wild60
PyPI Repository Makes 2FA Security Mandatory for Critical Python ProjectsThe Hacker News·Jul 11, 05:23 UTC · Jul 11, 2022Industry155
PyPI Repository Enforces 2FA for Critical Python ProjectsInfosecurity Magazine·Jul 11, 16:05 UTC · Jul 11, 2022Industry155
It finally happened: Criminals exploit SS7 vulnerabilities, prompting concerns about 2FACyberScoop·May 8, 18:32 UTC · May 8, 2017Vulnerability in the wild60
ManageEngine now supports two-factor authentication for macOS systemsHelp Net Security·Aug 15, 00:00 UTC · Aug 15, 2019Policy & legal55
Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass FlawsThe Hacker News·Jan 21, 15:42 UTC · Jan 21, 2026Vulnerability in the wildCVE-2026-22844CVE-2025-13927CVE-2025-13928+3 CVEs60
Five-year-old Fortinet FortiOS SSL VPN flaw actively exploitedSecurity Affairs·Dec 25, 19:40 UTC · Dec 25, 2025Ransomware in the wildCVE-2020-12812CVE-2018-13379CVE-2019-559160
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing AttacksThe Hacker News·Sep 10, 09:40 UTC · Sep 10, 2025Phishing & fraud55
Week in review: Drupal-based sites open to attack, cPanel 2FA bypass vulnerabilityHelp Net Security·Nov 29, 00:00 UTC · Nov 29, 2020VulnerabilityCVE-2020-400660
cPanel 2FA bypass vulnerability can be exploited through brute forceHelp Net Security·Nov 25, 00:00 UTC · Nov 25, 2020Vulnerability55
⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-theThe Hacker News·Aug 27, 05:11 UTC · Aug 27, 2025Ransomware in the wildCVE-2018-0171CVE-2025-43300CVE-2025-7353+5 CVEs60
Boing Boing says hacker got around 2FA in breaching its content management systemCyberScoop·Jan 13, 21:56 UTC · Jan 13, 2020Exploit / PoC in the wild60
Critical Copilot vulnerability allowed hackers to steal 2FA code from usersArs Technica · Security·Jun 15, 00:00 UTC · Jun 15, 2026Vulnerability155
ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, BillionThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability55
Watch Out for Salty2FA: New Phishing Kit Targeting US and EU EnterprisesThe Hacker News·Sep 10, 08:00 UTC · Sep 10, 2025Phishing & fraud55
⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-29824CVE-2024-11859CVE-2025-3102+17 CVEs60
Most top travel websites fail to protect user securityHelp Net Security·May 3, 00:00 UTC · May 3, 2018Industry55
LastPass vulnerability 'beats the entire purpose' of twoCyberScoop·Apr 20, 22:27 UTC · Apr 20, 2017Vulnerability in the wild60
Will Yahoo breach finally get us past the password?CyberScoop·Sep 23, 17:42 UTC · Sep 23, 2016Data breach60
Fix SOC Blind Spots: See Threats to Your Industry & Country in Real TimeThe Hacker News·Dec 17, 11:30 UTC · Dec 17, 2025Malware55
The UK’s phone theft crisis is a wake-up call for digital securityHelp Net Security·Apr 18, 00:00 UTC · Apr 18, 2025Data breach60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]The Hacker News·Jan 20, 12:04 UTC · Jan 20, 2025RansomwareCVE-2025-21333CVE-2025-21334CVE-2025-21335+36 CVEs60
Sessions and events to check out at RSA Conference 2019Help Net Security·Feb 8, 09:56 UTC · Feb 8, 2024Data breach60
Hundreds of network operators’ credentials found circulating in Dark WebSecurity Affairs·Jan 30, 09:44 UTC · Jan 30, 2024Data breach60
Hundreds of network operators’ credentials found circulating in Dark WebHelp Net Security·Jan 30, 00:00 UTC · Jan 30, 2024Ransomware60
Industry reactions to Data Privacy Day 2019Help Net Security·Jan 28, 00:00 UTC · Jan 28, 2019Data breach60
YubiKey anti-phishing device saw 'huge spike' in orders this yearCyberScoop·Nov 30, 23:39 UTC · Nov 30, 2016Phishing & fraud in the wild60
Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC releasedHelp Net Security·Aug 2, 00:00 UTC · Aug 2, 2026Data breachCVE-2026-54121CVE-2026-63077CVE-2026-20316+1 CVEs60
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
If you think you're immune to phishing attempts, you're wrong!Help Net Security·Apr 2, 08:45 UTC · Apr 2, 2025Phishing & fraud55
Spies hack Wi-Fi networks in far-off land to launch attack on target next doorArs Technica · Security·Nov 23, 02:03 UTC · Nov 23, 2024Exploit / PoC60
Bitwarden Authenticator protects online services and applicationsHelp Net Security·May 2, 00:00 UTC · May 2, 2024Vulnerability55
Most people still rely on memory or pen and paper for password managementHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2024Vulnerability55
Week in review: 3FA, Fortinet firewalls under attack, and the riskiest connected devicesHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2022Exploit / PoC in the wildCVE-2022-41033CVE-2022-40684CVE-2022-36067+1 CVEs160
PyPI Repository Warns Python Project Maintainers About Ongoing Phishing AttacksThe Hacker News·Aug 26, 05:01 UTC · Aug 26, 2022Phishing & fraud55