Jeremy C - Rankiteo Blog (Page 121)

Google: Fake Google Security site uses PWA app to steal credentials, MFA codes

public – 4 min read

Sophisticated Phishing Campaign Exploits Fake Google Security Page to Steal OTPs and Cryptocurrency A recent phishing campaign is impersonating Google’…

Mar 2, 2026

Jeremy C

Canadian Investment Regulatory Organization: Re: Who will pay for CIRO’s data breach?

public – 2 min read

CIRO Data Breach: Costs, Funding Debates, and Regulatory Accountability The Canadian Investment Regulatory Organization (CIRO) faces scrutiny over the financial…

Mar 2, 2026

Jeremy C

Pyramid Global Hospitality: Pyramid Data Breach Claims Investigated by Lynch Carpenter

public – 2 min read

Pyramid Global Hospitality Suffers Data Breach Impacting Over 50,000 Individuals Pittsburgh-based Pyramid Global Hospitality ("Pyramid"), a hotel…

Mar 2, 2026

Jeremy C

Madison Square Garden Entertainment: Madison Square Garden Entertainment Data Breach Claims Investigated by Lynch Carpenter

public – 2 min read

MSGE Data Breach Exposes Personal Information of Over 131,000 Individuals Madison Square Garden Entertainment (MSGE), the operator of high-profile…

Mar 2, 2026

Jeremy C

Mysterium VPN: 12 million IPs exposed sensitive .env files

public – 2 min read

Millions of IP Addresses Expose Sensitive Data via Public .env Files A major security oversight has exposed over 12 million…

Mar 2, 2026

Jeremy C

Oracle: Comment | The Top Ways Attackers Infiltrate Systems Today

public – 2 min read

Ransomware Attack Vectors: How Threat Actors Infiltrate Organizations Ransomware remains a critical threat to UK businesses, with cybercriminals employing increasingly…

Mar 2, 2026

Jeremy C

DuckDuckGo: UXSS Vulnerability in DuckDuckGo Browser’s AutoConsent JS Bridge Allows Cross-Origin Attacks

public – 2 min read

DuckDuckGo Android Browser Patched for Critical UXSS Vulnerability A high-severity vulnerability in the DuckDuckGo browser for Android was recently disclosed,…

Mar 2, 2026

Jeremy C

OneUptime: OneUptime Command Injection Vulnerability Poses Major Risk of Full System Takeover

public – 2 min read

Critical Command Injection Flaw in OneUptime Exposes Systems to Remote Takeover A severe command injection vulnerability, tracked as CVE-2026-27728, has…

Mar 2, 2026

Jeremy C

Angular: Angular SSR Request Vulnerability Allows Attackers to Trick Applications into Sending Unauthorized Requests

public – 2 min read

Critical SSRF Vulnerability in Angular SSR Exposes Web Applications to Attack A severe Server-Side Request Forgery (SSRF) vulnerability, tracked as…

Mar 2, 2026

Jeremy C

CFGI: Have I Been Pwned’s Post

public – 2 min read

CFGI Hit by ShinyHunters Extortion Campaign, Exposing 243K Corporate Emails In March, global consulting firm CFGI fell victim to an…

Mar 1, 2026

Jeremy C

Wirtualna Polska and Google: Ghostwriter Hackers Abuse Gmail Admin-Themed Emails to Steal Credentials and 2FA Codes

public – 3 min read

Ghostwriter Hackers Target Gmail Users in Sophisticated Phishing Campaign A state-linked hacker group, Ghostwriter (UNC1151), has intensified its phishing attacks…

Mar 1, 2026

Jeremy C

Gmail: Ghostwriter APT Uses Fake Gmail Login Panels to Steal Passwords and 2FA Codes

public – 3 min read

Ghostwriter (UNC1151) Escalates Phishing Attacks with Advanced Gmail Credential Harvesting CERT Polska has uncovered a significant evolution in the phishing…

Mar 1, 2026

Jeremy C