Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• 7 Key Features That Make Secure Browsers Safer

  HackRead

  T1555.003 72% T1185 64% T1557.001 60%
  2 days ago
• That AI Extension Helping You Write Emails? It’s Reading Them First

  Palo Alto Unit 42

  T1176.001 97% T1176 97% T1071.001 88%
  6 days ago
• [webapps] HUSTOJ Zip-Slip v26.01.24 - RCE

  Exploit-DB

  T1190 96% T1539 48%
  6 days ago
• [webapps] GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)

  Exploit-DB

  T1190 68% T1539 66% T1505.003 45%
  2026-04-29
• Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies

  Infosecurity Magazine

  T1539 76%
  2026-04-10
• Protecting Cookies with Device Bound Session Credentials

  Google Security Blog

  T1539 99% T1555.003 65%
  2026-04-09
• 2025 Identity Threat Landscape Report: Inside the Infostealer Economy: Credential Threats in 2025

  Recorded Future Blog

  T1078 90% T1539 90% T1555.003 83%
  2026-03-16
• Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale

  Microsoft Threat Intelligence

  T1566.002 99% T1583.001 98% T1556.006 96%
  2026-03-04
• CVE-2023-46218 This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk` even though `co.uk` is listed as a PSL domain.

  MSRC Update Guide

  T1539 31%
  2026-02-18
• CVE-2023-38546 This flaw allows an attacker to insert cookies at will into a running program using libcurl if the specific series of conditions are met. libcurl performs transfers. In its API an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a function call that duplicates en easy handle called [curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html). If a transfer has cookies enabled when the handle is duplicated the cookie-enable state is also cloned - but without cloning the actual cookies. If the source handle did not read any cookies from a specific file on disk the cloned version of the handle would instead store the file name as `none` (using the four ASCII letters no quotes). Subsequent use of the cloned handle that does not explicitly set a source to load cookies from would then inadvertently load cookies from a file named `none` - if such a file exists and is readable in the current directory of t

  MSRC Update Guide

  T1539 66%
  2026-02-18
• Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users

  Datadog Security Labs

  T1539 99% T1566.002 98% T1111 70%
  2025-12-10
• #ShadyHacks with Kyle Hanslovan

  Huntress

  T1078.004 92% T1564.008 76% T1111 64%
  2025-11-26
• Introducing Credential Monitoring

  Project Discovery

  T1539 65% T1555.003 53% T1003 31%
  2025-11-04
• Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C

  Trend Micro Research

  T1059.001 98% T1204.002 95% T1047 78%
  2025-10-27
• An Attacker’s Blunder Gave Us a Look Into Their Operations

  Huntress

  T1059.006 92% T1176.001 91% T1591 73%
  2025-09-09
• The 36 Most Common Cyberattacks (2025) | Huntress

  Huntress

  T1486 99% T1190 99% T1189 99%
  2025-05-02
• How EDR and ITDR Elevate Your Security

  Huntress

  T1556.006 60% T1539 56% T1003 46%
  2025-04-09
• Top 10 web hacking techniques of 2024

  PortSwigger Research

  T1588.006 75% T1539 67% T1190 62%
  2025-02-04
• Stealing HttpOnly cookies with the cookie sandwich technique

  PortSwigger Research

  T1539 93% T1190 69%
  2025-01-22
• Adversary in the Middle (AitM): Post-Exploitation

  Black Hills InfoSec

  T1566.002 96% T1525 84% T1528 79%
  2024-11-04
• Making Sense of Alphabet Soup: 16 Security Terms and Acronyms You Should Know | Huntress

  Huntress

  T1056.001 100% T1486 99% T1219 97%
  2024-09-18
• State-backed attackers and commercial surveillance vendors repeatedly use the same exploits

  Google Threat Analysis Group

  T1189 98% T1539 93% T1555.003 72%
  2024-08-29
• APT Targeting Vietnamese Human Rights Defenders | Huntress

  Huntress

  T1053.005 100% T1547.001 100% T1055.001 99%
  2024-08-28
• StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

  Volexity

  T1040 99% T1195.002 95% T1176.001 94%
  2024-08-02
• 2023 Identity Threat Report: The Unpatchables

  F5 Labs

  T1555.003 97% T1566.002 97% T1556.006 94%
  2023-11-01
• Introducing Session Hijacking Visual Exploitation (SHVE): An Innovative Open-Source Tool for XSS Exploitation

  Doyensec

  T1185 73% T1539 55% T1557 44%
  2023-08-30
• How Bots Ruined the PlayStation 5 Launch for Millions of Gamers

  F5 Labs

  T1539 58% T1584.005 45% T1583.005 45%
  2023-03-18
• BlackGuard Infostealer Malware: Dissecting the State of Exfiltrated Data

  F5 Labs

  T1539 95% T1113 88% T1555.003 88%
  2022-08-15
• What Is Cross-Site Scripting?

  F5 Labs

  T1185 56% T1539 53% T1557 32%
  2020-04-17
• Malware Targeting Bank Accounts Has a Swapping Pattern

  F5 Labs

  T1539 58%
  2016-09-01