BlueKit Phishing: A Stolen Session Can Outlast the Login
New BlueKit research tracks subscription phishing tools. Its remote-browser technique explains why account recovery needs session checks, not just a new password.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
November 13, 2026
Latest reports
Ukraine Money-Mule Network Allegedly Bypassed Bank Blocks
Ukraine police describe about 300 money mules and alleged insider help bypassing card blocks. The UAH 127 million turnover is separate from confirmed losses.
ShinyHunters Suspect Rey Reportedly Detained in Jordan
Reuters reports a ShinyHunters suspect is helping investigators. The reported detention does not establish that stolen records were recovered or erased.
MVS Warns Fake Browsing Fines Can Lead to Bank-Data Theft
Ukraine’s MVS warns about fake website-browsing fines. See how the payment lure seeks bank details and what changes if you already shared information.
BPFDoor and AVERAT Hide Linux Access in Mail-Gateway Traffic
Rapid7 found Linux implants using deleted executables, daemon disguises and SMTP control traffic. What mail-gateway operators should investigate.
iCloud Sender Spoofing Passed Email Authentication in Newly Disclosed Research
New iCloud research explains how forged sender addresses passed SPF, DKIM and DMARC. The flaws were fixed in December 2025; see what the checks…
MetaMask Staking Exits Validators After Reward Payments Were Diverted
MetaMask is exiting affected validators after diverted rewards. The 0.36 ETH payment total and 565,056 ETH exit estimate describe different controls.
Free Mobile Phishing Turns a €9.99 Bill Into a Card-Data Trap
A documented Free Mobile phishing email uses a €9.99 debt and a disguised link to reach a fake card-payment form. Check the account independently.
Fake xStocks and Pendle Votes Lure Users to Wallet Permissions
A new investigation finds 70 fake crypto sites. Their reward vote opens a wallet chooser; connection and token-spending approval are different steps.