Twilio hacked by phishing campaign targeting internet companies

Carly Page reports: Communications giant Twilio has confirmed hackers accessed customer data after successfully tricking employees into handing over their corporate login credentials.  The San Francisco-based company, which allows users to build voice and SMS capabilities — such as two-factor authentication (2FA) — into applications, said in a blog post published Monday that it became aware that someone...

FBI raids Trump’s Mar-a-Lago

Rebecca Beitsch and Harper Neidig report: The FBI executed a search warrant on former President Trump’s home in Florida on Monday, the ex-president said, lashing out at law enforcement for what he called “political persecution.” “My beautiful home Mar A Lago in Palm Beach, Florida is currently under siege, raided and occupied by a large group...

Update: Colosseum Dental Benelux pays ransom to threat actors

Updating the story concerning Colosseum Dental Benelux reported yesterday, Yannick Spinner reports (machine translated): The umbrella company, in its own words, had no choice but to pay the criminals: “Caring for our patients is our top priority and prompted Colosseum Dental to contact the cyber attackers and make agreements about the return and security of...

Snapchat, Amex sites abused in Microsoft 365 phishing attacks

Sergiu Gatlan reports: Attackers abused open redirects on the websites of Snapchat and American Express in a series of phishing attacks to steal Microsoft 365 credentials. Open redirects are web app weaknesses that allow threat actors to use the domains of trusted organizations and websites as temporary landing pages to simplify phishing attacks. Read more...