Placeholder Domain Used in Developer Docs Now Serves ClickFix Attacks
third-party.com, long used as a placeholder in developer documentation, is serving a fake Cloudflare verification page that targets Windows users with a ClickFix attack. The page…
Security News
Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3 articles
Microsoft-led operation disrupts EvilTokens phishing service that compromised over 12,000 inboxes
Microsoft and partner organizations disrupted EvilTokens, a phishing service that compromised more than 12,000 inboxes across over 10,000 organizations. The service used an AI cha…
WordPress 7.1.2 Patches Critical Unauthenticated Path Traversal Flaw
WordPress 7.1.2 fixes CVE-2026-87902, a critical flaw in get_page_template() that could let an unauthenticated attacker cause WordPress to load a readable PHP file outside the act…