NewsProofpoint Threat Insight
From EDU Account Takeover to Job Scam Abuse: West African Fraud Actors Target Universities
More on Takeover
Other advisories
- Highosv:MAL-2026-18575Malicious code in working-today--empire-takeover-h-a-c-k-gen-erat-or-akcp8z (npm)
- Not ratedosv:CVE-2026-120263Gitea OAuth2 account auto-linking takeover through the sign-up form
- Not ratedosv:CVE-2026-63377TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover
- Not ratedosv:CVE-2026-61826Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery
- Not ratedosv:CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace
- Not ratedosv:CVE-2026-61728SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover
- Not ratedosv:CVE-2026-119564Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs
- Not ratedosv:CVE-2026-119425OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP
Other news entries
- Undead Software Projects Continue to Raise Security RisksNewsDark Reading
- AI-Generated Fake Login Pages Are Making Account Takeovers EasierNewsThe Hacker News
- Dead Popcorn Time Updater Put Millions of Computers at Risk of TakeoverNewsSecurityWeek
- When the attacker becomes the user: Rethinking account takeoverNewsThe Register — Security
- Major U.S. banks detect unauthorized third-party AI agents inside customer accountsBreachpwn.watch
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFUNewsThe Register — Security
- F5, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover FlawNewsSecurityWeek
ID