Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System.
“Since January 2026, the threat actors behind these kits have been responsible for
Source: The Hacker News
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens New research shows content inside an email can escape its message boundary and interfere with the webmail interface.
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys,
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according