CVE-2025-40778

CVE-2025-40778 Preuve de Concept Démonstration pédagogique de la vulnérabilité d'empoisonnement du cache DNS via l'injection d'enregistrements additionnels. ⚠️ Avertissement UNIQUEMENT À DES FINS ÉDUCATIVES Cet outil est fourni uniquement à des fins éducatives et de tests de sécurité autorisés...

New QR Code Phishing Campaign Exploits Microsoft Sway to Steal Credentials

Cybersecurity researchers are calling attention to a new QR code phishing aka quishing campaign that leverages Microsoft Sway infrastructure to host fake pages, once again highlighting the abuse of legitimate cloud offerings for malicious purposes. "By using legitimate cloud applications, attacke...

New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI

Cybersecurity researchers are alerting of phishing campaigns that abuse Cloudflare Workers to serve phishing sites that are used to harvest users' credentials associated with Microsoft, Gmail, Yahoo!, and cPanel Webmail. The attack method, called transparent phishing or adversary-in-the-middle Ai...