MFA Prompt Bombing: Why Your Second Factor Isn’t Saving You
What's new: Attackers are increasingly exploiting push-based multi-factor authentication (MFA) through a technique called prompt bombing — flooding users with...
Year: 2026
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
What's new: Microsoft has released security patches for a remote code execution vulnerability in SharePoint Server tracked as CVE-2026-45659 (CVSS...
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
What's new: The Iranian state-sponsored threat group MuddyWater has launched a sophisticated new espionage campaign targeting at least nine organisations...
