'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month

Dark Reading feed covering active exploitation, malware and phishing campaigns, cloud and identity threats, AI-agent security risks, critical vulnerabilities, OT exposure, and cybercrime operations. Notable items include NovaCookies adversary-in-the-middle phishing targeting Microsoft 365 sessions, exploited Zimbra CVE-2026-73570, a critical GitLab zero-click flaw (CVE-2026-19478), malware families such as Amatera, SynkLoader, ToxicPanda, Grandoreiro, and Evooo1Bot, plus emerging risks involving LLM poisoning and rogue AI agents.