CyberheistNews Vol 14 #18 [Wake Up Call] A Fresh Nespresso Domain Hijack Brews an MFA Phishing Scheme

This CyberheistNews issue reports on an active MFA-phishing campaign that leverages an open-redirect vulnerability on Nespresso to host malicious redirects to credential-harvesting pages, highlights a major ransomware attack on global optics firm Hoya (with a reported $10M ransom and alleged data theft), summarizes a U.S. DOJ indictment of Iranian nationals for large-scale spear-phishing against government and defense contractors, and describes broader trends including a surge in AI-assisted phishing and MFA-bypass phishing kits.