Malwarebytes Labs·3d agoHow device code phishing gives scammers access to your account#device-code-phishing#oauth#mfa-bypass 3 min
Huntress·3d ago highOAuth Token Theft Through Microsoft's Front Door | Huntress#wwahost#appx#oauth 15 min
Security Affairs·3d ago highEvilTokens made phishing-as-a-service look easy. Then it got taken down#business-email-compromise#device-code-phishing#evil-tokens 14 sources in the wild 5 min
GBHackers·7d agoAI-Powered RatHat Android Trojan Steals Bank Credentials, PINs and MFA Codes#accessibility-service#adb#ai in the wild 3 min
Cyber Security News·10d ago highGhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds#bec#device-code-phishing#esentire in the wild 6 min5
The Hacker News·17d agoInfostealer Logs Expose Replayable AI Tokens That Can Bypass MFA#api-keys#infostealer#llmjacking in the wild 5 min1
The Register · Security·18d ago highBigBear phishing crew nets thousands of Microsoft 365 credentials#adversary-in-the-middle#cloudsek#evilginx2 in the wild 3 min1
Infosecurity Magazine·18d ago highBigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials#bec#bigbear-2#cloudsek in the wild 2 min1
Cyber Security News·18d ago highBigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie Theft#aitm#cloudsek#evilginx2 in the wild 7 min1
Security Affairs·18d ago highIT Help Desk Impersonation Lets Hackers Bypass MFA#adversary-in-the-middle#extortion#mfa-bypass in the wild 3 min1
DataBreaches.net·19d agoBigBear Microsoft 365 phishing service bypassed MFA at 258 organizations#aitm#bigbear#cloudsekPhishing & fraud in the wild1
BleepingComputer·19d ago highBigBear Microsoft 365 phishing service bypassed MFA at 258 organizations#aitm#bigbear#cloudsek in the wild 3 min1
Help Net Security·25d agoAttackers are going after prominent individuals through OAuth phishing, FBI warns#consent-phishing#fbi#ic3 in the wild 2 min
The Hacker News·25d agoNovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions#aitm#docusign#mfa-bypass 8 min1
Dark Reading·Aug 26, 2026'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month#aitm#mfa-bypass#microsoft-3651
The Hacker News·Aug 25, 2026 highMirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows#aitm#any-run#mfa-bypass in the wild 4 min1
Help Net Security·Aug 17, 2026 highFrance’s tax authority admits hackers made off with data on 678,000 individuals#anssi#data-breach#dgfip 2 min