#Account Takeover
N-able N-central flaw exposes MSP consoles to account takeover
N-able N-central flaw exposes MSP consoles to account takeover N-able has released an emergency hotfix for N-central after confirming active exploitation of an...
Lucas Oliveira
Research
FlagLeft Turns Microsoft 365 Android Apps Into a Silent Account Takeover Path
FlagLeft Turns Microsoft 365 Android Apps Into a Silent Account Takeover Path | 2026 Executive Summary Enclave disclosed a research finding it calls FlagLeft, d...
Lucas Oliveira
Research
CVE-2026-22557 puts internet-exposed UniFi controllers at account-takeover risk
CVE-2026-22557 puts internet-exposed UniFi controllers at account-takeover risk CVE-2026-22557 is the kind of infrastructure flaw defenders should treat as urge...
Lucas Oliveira
Research
Telegram zero-click flaw ZDI-CAN-30207 raises 9.8 risk
Telegram zero-click flaw ZDI-CAN-30207 raises 9.8 risk | 2026 ZDI-CAN-30207 is now listed on the Zero Day Initiative's upcoming advisory page as a Telegram issu...
Lucas Oliveira
Research
ZITADEL 1-Click XSS Enables Account Takeover | 2026
ZITADEL 1-Click XSS Enables Account Takeover | 2026 Executive Summary ZITADEL disclosed CVE-2026-29191 in early March 2026, warning that versions 4.0.0 through...
Lucas Oliveira
Research
North Korean Hackers Use Deepfake Video Calls to Target Crypto Firms
Executive Summary Since February 2026, the North Korea–linked group UNC1069 has been observed running a highly targeted deepfake campaign against cryptocurrency...
Lucas Oliveira
Research
CVE-2026-21643 & CVE-2026-24858: Fortinet Critical Flaws | 2026
Executive Summary Since December 2025, two critical vulnerabilities in Fortinet's infrastructure have created a perfect storm for enterprise compromise: [CVE-20...
Lucas Oliveira
Research