Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

Userscript framework for shortlink bypassing. Includes a multi-site Router, async Waiters, DOM cache, unified Captcha handler (hCaptcha/reCAPTCHA/Turnstile) and a ...

First identified in June 2026, the operation targeted Microsoft 365 users and was reportedly still active during the ...

Joel Cunningham is Lifehacker’s Deputy Editor. He has 15 years of experience as a writer and editor. Previously, he was managing editor of content marketing for Barnes & Noble, where he founded the ...

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom ...

A Microsoft 365 phishing operation targeting hundreds of organizations captured thousands of passwords and session cookies, ...

Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ...

"BengalSEO used backlinks, DOM injection, DOM shuffling, and keyword stuffing to enable their operation through Black Hat SEO ...

This week’s cyber threats span phishing abuse, malicious extensions, exposed systems, old flaws, AI attacks, and supply-chain ...