ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Opera Just Rolled Out a Way to Block ClickFix Attacks in Its Browser

Opera's new Paste Protect feature blocks you from copying malicious scripts or commands. It lets you bypass blocks on certain sites you trust, too.
The Next Web

The captive portal economy: how hotel WiFi sign-in pages became both a security vector and a hidden ad channel

KeepSolid CEO Vasyl Ivanov explains how hotel WiFi captive portals evolved into both a security vulnerability and a programmatic ad channel, and what VPN clients should do about it.
FOX 26 Houston

Texas court orders porn site to pay $9M bond to unlock domain name

A Texas court has ordered that the domain name of a porn website be locked down after failing to comply with the state’s age-verification law.
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...