πŸ’» UK Threat Wednesday

Wednesday, 23 September 2026

Wednesday's focus: UK-specific scam alerts, fraud data, and protection advice

πŸ“Š Key Statistics

Metric Value
Domains & records monitored (all time) 34752
UK brand targets live now 10
Stories in this brief 5

πŸ“° Today's Coverage

  • Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
  • Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
  • Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
  • Rogue external MFA providers can steal passwords during logins
  • New HSBC phishing kit with SMS 2FA interception on dark web forums

πŸ” Sources Monitored

News feeds: The Hacker News, BleepingComputer Threat monitoring: DarkWatch, OnionClaw, Mirofish, IntelX


🐾 GUARDED BY BULLY β€” Generated by CyberAware UK β€” Data from DarkWatch, OnionClaw, Mirofish, IntelX & open sources