Discover three common network attacks and learn how to protect your systems. Stay secure - read now!

A Russia-linked hacking group identified as Midnight Blizzard has exploited hotel and conference Wi-Fi networks globally, redirecting users to phishing pages and fake software updates to steal sensitive data. Microsoft's analysis of the campaign, named CaptiveCrunch, indicates it targets traveling employees across various sectors rather than specific industries. The attack involves compromising captive portal gateways in multiple countries, including the U.S., India, and Saudi Arabia, affecting financial services, legal, healthcare, energy, and retail organizations. Attackers deploy tools like CornFlake, a Windows remote access trojan capable of keylogging and credential theft, and ChocoShell, an in-memory PowerShell tool for stealing browser cookies and Microsoft 365 tokens. The campaign also shows potential targeting of Android devices through APK file prompts. While Microsoft did not specify the exact number of affected venues or individuals, security firm ReliaQuest's prior findings highlight widespread compromise in major cities. This incident underscores vulnerabilities in public Wi-Fi infrastructure and the growing threat of cyberattacks against mobile professionals.

AirSnitch is a set of novel Wi‑Fi attack techniques presented at NDSS 2026 that exploit interactions between encryption, switching and routing layers to bypass protections in WPA2 and WPA3-Enterprise. These techniques (e.g., Gateway Bouncing, Port Stealing, Broadcast Reflection) enable attackers to intercept or inject traffic by manipulating MAC-to-port mappings and shared...

A tool intended for security, SSH-Snake, now aids attackers in exploiting networks. Discover the depths of its reach and how to safeguard your infrast