A report into the Southport attack on Monday found that it was a 'clearly signposted disaster waiting to happen'.
New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.