21st September – Threat Intelligence Report
Check Point weekly roundup covers Japan Digital Agency and Gyazo breaches, actively exploited Cisco ISE flaw, and multiple new APT campaigns.
4
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #ghostcode
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
GhostCode phishing kit abuses Microsoft's OAuth device authorization flow to harvest tokens, register devices, and steal primary refresh tokens from M365 victims.
5
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
eSentire exposes GhostCode, a device-code phishing kit that abuses Microsoft Entra device enrollment to persist even after stolen tokens are revoked.
9