WAY 401 Hida House - Al Khuwair South - Muscat -Oman
info@tscogroup.com

Jessica Barrera

Google Calendar phishing campaign hijacks sessions, bypasses MFA

Google Calendar phishing campaign hijacks sessions, bypasses MFA

Since mid-August 2026, a phishing operation has been harvesting live Google sessions from corporate users. Every signal defenders usually rely on to judge a link returned a reassuring answer, and the operator built the chain that way on purpose. Material Security’s Threat Research team identified the campaign and has taken down hundreds of domains used by attackers in what they have dubbed Operation CloudFire. Here’s what they learned along the way. The lure: Google Calendar invites The messages arrive as
Read More

Chrome could soon make tab overload a lot easier to manage

Edgar Cervantes / Android Authority Add Android Authority on Google: TL;DR Google Chrome is testing a horizontally scrollable tab bar, making it easier to navigate dozens or hundreds of open tabs. Users can scroll through tabs using their mouse wheel or dedicated arrow buttons, while pinned tabs remain fixed on the left. The feature is currently available in Chrome Canary through an experimental flag, with no confirmed stable release date. Google Chrome is finally learning a trick that rivals like
Read More
New Android SMS of Death exploit can remotely crash unpatched phones

New Android SMS of Death exploit can remotely crash unpatched phones

A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. The zero-click denial-of-service flaw can interrupt ongoing calls, including emergency calls, without requiring any interaction from the target. What's worse, Android processes the message before it reaches the SMS inbox, leaving victims with no visible indication of what caused their phones
Read More
Japan Airlines suffers third-party data breach exposing passenger info

Japan Airlines suffers third-party data breach exposing passenger info

Japan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers. JAL Group, which operates the airlines JAL and Japan Transocean Air, uses the system to handle passenger reservations, ticketing, and check-in. According to its announcement, Amadeus notified the airline on October 23, 2026, that unauthorized access to its systems occurred between August 10, 2023, and September 23, 2026. As a result of this lengthy breach, the threat actor accessed
Read More