Kali365 Exploits Microsoft Device Login to Access US Corporate Data

HackRead RSS items report active cyber threats and vulnerabilities, including abuse of Microsoft device login for OAuth token theft, the Shai-Hulud npm supply-chain worm compromising more than 1,280 packages, exploitation of an N-able N-central authentication flaw, malicious H96 Android TV box software used for ad fraud and residential proxies, and a Thermo Fisher forensic DNA file-tampering vulnerability (CVE-2026-17583). The collection also covers a suspected COLDCARD seed-generation weakness associated with approximately $89 million in Bitcoin theft.