Over 750,000 websites require patching following discovery of DotNetNuke XSS vulnerability ...
Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.