Vercel ties sessions to devices and opens AI security reviews in beta
Full Device Bound Session Credentials support is limited to Chrome on Mac and Windows, with a less secure polyfill planned.
Stories per day · 30 days
4 RSS
Relatedaitm2credential-theft2phishing2ai-agents1akamai1bot-management1bug-bounty1chatgpt1cloudfire1code-scanning1darkcore1dbsc1device-code-phishing1entra-id1gift-card-fraud1gmail1google-calendar1inbox-rules1
50 stories, newest first · one card per story
Stories tagged #session-hijacking
Google Calendar phishing campaign hijacks sessions, bypasses MFA
Phishers use live reverse proxies on Google sign-in pages to hijack sessions in real time, evading MFA and reputation checks.
1
ChatGPT share links could run code in a signed-in session
Parameter reported the P1 issue on October 18; OpenAI fixed both web frontends by October 26 and paid $5,000.
Generative AI is making fake login pages easier to scale
The 2026 Verizon DBIR linked phishing to 44% of the AI-assisted initial-access techniques it examined.
1
Akamai post describes silent agents acting on live sites
A truncated October 26 post by Brent Maynard frames silent agents as a session-hijacking risk in banking and commerce.
1
DarkCore RAT Enables Session Hijacking of Gmail and WhatsApp
DarkCore RAT allows attackers to hijack authenticated sessions in Gmail, WhatsApp and MediaFire using stolen cookies without needing passwords, requiring an existing endpoint foothold.
Stolen Microsoft 365 sessions replayed at 79 organizations
Huntress counted 497 successful sign-ins and over 200,000 failures from July 14 to September 22, with inbox rules hiding mail.
1
Court records tie Staples hack to multimillion-dollar gift-card fraud
Hackers issued more than 15,000 cards worth over $5 million; the gang redeemed about $425,000 of them.
1
CVE-2026-102489 | Technical Details
Zammad flaw CVE-2026-102489 leaks WebSocket session cookies unauthenticated, enabling hijack and RCE, and is in CISA KEV.
8
PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution
Horizon3.ai released a PoC for Zammad CVE-2026-102489 that leaks session cookies and can yield remote code execution.
6
PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution
Researchers released a PoC for critical Zammad flaw CVE-2026-102489 enabling session hijacking and remote code execution.
1
We are fighting phishing at the wrong layer
A researcher argues phishing defense should hunt shared AiTM servers that leak their origin via cookies.
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
Malwarebytes says BlueKit PhaaS lets criminals launch brand-phishing sites and steal sessions in about ten minutes.
Zammad Zero-Day Chain Lets AI Agent Hijack Sessions, Execute Code and Escalate to Root
An AI agent chained Zammad zero-days CVE-2026-102489 and CVE-2026-102490 to breach DIVD, reaching root in seconds and stealing volunteer emails.
How RMM abuse gives attackers a way in that looks like business as usual
Huntress reports attacker RMM abuse in 45% of Q1 2026 endpoint incidents, up 277% YoY, delivered via phishing lures stacking multiple remote-access tools.
Zammad Vulnerabilities Let Attackers Execute Code and Escalate Privileges to Root
Chained Zammad flaws CVE-2026-102489/102490 enable session hijacking, RCE, and root escalation; already used against DIVD.
2
Chinese spies impersonate White House, Anthropic figures to phish AI policy experts
China-aligned TA419 phished US AI policy experts by impersonating White House and Anthropic figures.
AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds
Chained Zammad zero-days let an AI agent breach DIVD, gain root in seconds, and exfiltrate data; users urged to update to version 7.
Know Your Enemy: Browser-Based Attack Techniques in 2026
Push Security survey details six dominant browser attack techniques for 2026, including AiTM phishing, ClickFix, OAuth abuse, and session hijacking.
10
80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking
SOCRadar analysis of over one million infostealer records found stolen AI logins across 80,000+ corporate domains, with ChatGPT sessions dominating LLMjacking exposure.
1
Hackers Don’t Need to Break Into the Cloud When They Can Steal the Keys
Wiz says Lumma, RedLine, and Vidar stealers are harvesting cloud, code, and AI credentials.
2
Lumma, RedLine and Vidar Infostealers Fuel Cloud Credential Theft Campaigns
Lumma, RedLine, and Vidar steal cloud and developer credentials, enabling session hijacking that bypasses MFA.
2
New Python Infostealer Targets 17 Browsers to Steal Passwords, Cards and Session Cookies
K7 Labs details a Python infostealer MaaS builder harvesting credentials, cards and session cookies from 17 Chromium browsers plus Firefox.
2
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz finds Lumma, RedLine, and Vidar dominate infostealer theft of AWS, GitHub, and OpenAI credentials from endpoints.
4