High-severity bug in Telegram Desktop pre-7.2.9 lets attackers steal files and take over accounts with one click. #Telegram #Security #Vulnerability #CVE2026 #AccountTakeover https://thedailytechfeed.com/one-click-telegram-desktop-weakness-lets-attackers-steal-files-hijack-accounts/

A critical Telegram Desktop account takeover vulnerability (CVE-2026-107181) exposes users to session hijacking. Exploit details and PoC are now public.

#Telegram #Cybersecurity #CVE2026107181 #AccountTakeover #PoC

📣 New Podcast! "Microsoft X Account Hacked: Crypto Scammers Exploit 13 Million Followers" on @Spreaker #accounttakeover #clippy #cryptocurrency #cryptofraud #cryptoscam #cyberattack #cybercrime #cybersecurity #cyberthreats #digitalsecurity #hacking #infosecurity #mfa #microsoft #microsofthack

@socket.dev
Fake PDF verifier steals Google session cookies and can reset passwords.
-
IOCs: pdf[.]gusercontent[.]com, pdf[.]gusercontent[.]com/api/accounts/collect/, pdf-para-texto@extensao[.]local
-
#AccountTakeover #Malware #ThreatIntel

📰 TrustSink: Penyedia MFA Eksternal Nakal Bisa Mencuri Password Saat Login Microsoft Entra

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/23/trustsink-microsoft-entra-rogue-mfa-provider-curi-password/

#accountTakeover #authentication #authenticationPolicyAdministrator #cloudSe

📰 EvilTokens PhaaS Dibekuk Setelah Membobol 12.000 Akun Microsoft

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/23/eviltokens-phaas-bobol-12000-akun-microsoft/

#accountTakeover #ai #bec #businessEmailCompromise #cloudSecurity #credentialTheft #cybercrime #cybersecurity #devic

Fake admin-level access keys were found in a watchTowr test network, linked to real access attempts against WSO2 products.

Fixes are availa…

https://en.hacks.gr/apopeires-epithesis-sta-proionta-tis-wso2-mporei-na-dosoyn-prosvasi-se-logariasmoys-diacheiriston/

#WSO2 #AccountTakeover #AccessControl

Microsoft warns that scammers are impersonating corporate IT support to access Microsoft 365 accounts.

Fake sign-in pages and…

https://en.hacks.gr/kliseis-kai-minymata-paristanoyn-ti-microsoft-gia-na-apoktisoyn-prosvasi-se-etairikoys-logariasmoys/

#Microsoft365 #SocialEngineering #AccountTakeover

⚠️ #SW_ISAC_ADVISORY

There is a spate of #AccountTakeover underway.

Service providers may receive reports for accounts that have a display name beginning with "Hacked -" or linking to "t[.]me/HomeFucker5"

These accounts may be longstanding valid […]

[Original post on mastodon.iftas.org]