Preview image for a blog post

Midnight Blizzard's Evolving Threat: Hijacking Captive Portals for Token Exfiltration

Midnight Blizzard (Storm-2945) exploits hotel captive portals with fake updates to steal sensitive user tokens.
Preview image for a blog post

ShinyHunters' Latest Salvo: Dissecting the Attack on Salesforce Experience Cloud via Modified Aura Inspector

ShinyHunters targets Salesforce Experience Cloud via modified Aura Inspector, not platform vulnerability. Essential defense strategies for researchers.