Skip to main content

Tag: account compromise

6 articles

Blurred login page on a mobile device in a brightly-lit Chick-fil-A restaurant setting.

Chick-Fil-A Breach Uncovers Credential Stuffing Vulnerability

Chick-fil-A recently fell victim to a credential stuffing attack, exposing sensitive customer info - including names, email addresses, and credit card details - and raising concerns about the vulnerability of online accounts. The breach highlights the importance of securing digital credentials to protect personal data.

Analyst 207
Cluttered home office desk with a lit computer terminal.

GitHub Accounts Used to Map Corporate Orgs in Stealthy Campaigns

Cyber attackers are using sneaky tactics, leveraging old or compromised GitHub accounts, to secretly map out corporate organizations and steal sensitive data. They're exploiting loopholes with automated tools and stolen tokens to quietly gather intel from GitHub APIs.

Analyst 207
Marketing professional looks concerned, holding smartphone amidst papers and laptop.

Phishing Campaign Targets Google Accounts with Fake Job Interviews

Beware of fake job interviews that could be phishing scams! A clever new campaign is targeting marketing pros with emails that appear to be from recruiters, aiming to trick them into handing over their Google account credentials.

Analyst 207
Cautious hand approaches laptop with blurred screen in neutral workspace.

Gizmodo Readers Targeted by ClickFix Malware After Account Compromise

If your Gizmodo account was compromised, be aware that you may have been targeted by the ClickFix malware, which showed up as suspicious prompts after the breach. Stay vigilant and take immediate action to protect your online security!

Analyst 207
Smartphone with Instagram login screen on display, set against a blurred cityscape background.

Meta AI Flaw Compromises 20,000 Instagram Accounts

A bug in Meta's AI-powered support feature, High Touch Support, allowed outsiders to access nearly 20,000 Instagram accounts by exploiting a flaw that failed to verify email addresses for password reset requests. This oversight enabled hackers to bypass security checks and gain unauthorized account access.

Analyst 207
Shadowy figure hunched over laptop with eerie glow, cityscape with lit skyscrapers in background.

Hackers Exploit Microsoft 365 Mailbox Rules to Conceal Post-Breach Activity

Hackers are exploiting a sneaky vulnerability in Microsoft 365 mailbox rules to hide their tracks, siphon sensitive data, and maintain a backdoor into compromised accounts. This stealthy tactic allows attackers to fly under the radar, making it even harder to detect and stop them.

Analyst 207