Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

Attackers used Azure CLI and ROPC to expose Microsoft 365 MFA gaps, showing why admins need tighter Conditional Access and ...
Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.
The Hacker News

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
PC Magazine

Apple's Siri AI Will Automatically Fix Your Weak Passwords. Can You Trust It?

With iOS 27, Apple is using AI to automate the second part. Instead of manually changing the password for each website, you’ll soon be able to visit the Passwords app’s Security tab and let Apple’s AI ...
Bleeping Computer

New Apple feature automatically changes your compromised passwords

At WWDC 2026, Apple announced an Apple Intelligence-powered feature that can automatically fix weak and compromised passwords. Right now, Safari and the built-in Apple Passwords app can automatically ...