Proofpoint details BluePhishing attack on Microsoft Entra agent identities
One admin consent can create persistent agent identities; Proofpoint reports no observed real-world use.
Stories per day · 30 days
14 RSS
Relatedmicrosoft-36511connectwise10supply-chain8storm-09406artex5password-spraying5skykick4ai-agents3entra-id3phishing3apache-camel2apache-kafka2cloud-backup2device-code2jwt2msp2prompt-injection2sasl2
106 stories, newest first · one card per story
Stories tagged #oauth
AI agent detection signals that still work when agents look human
Undeclared and disguised AI agents evade binary bot detection using human-like signals and coordinated sessions.
1
SkyW4lker phishing kit abuses Microsoft 365 device-code flow for account takeovers
SkyW4lker has tracked 618 sandbox analyses since June 2026 with nearly half from the United States targeting Microsoft 365 sessions.
Google::Auth for Perl (2 CVEs)
Affects versions 0.11 through 0.12; no fixed versions or exploitation stated.
Kafka skips JWT signature checks when JWKS URL is unset (CVE-2026-110985)
DefaultJwtValidator verifies signatures only if sasl.oauthbearer.jwks.endpoint.url is set; that setting is unset by default.
SkyW4lker phishing kit abuses Microsoft 365 device-code login
ANY.RUN linked 618 analyses from June through October 21, 2026, with monthly cases rising from 20 to 200.
1
Microsoft Authenticator Android flaw let apps steal work tokens
Versions before 6.2606.4246 are affected; Microsoft rated CVE-2026-80097 at CVSS 8.6 and shipped a fix on September 8, 2026.
1
Apache Camel patches XXE, deserialization, and credential flaws
Saxon needs 4.18.5, 4.22.2, or 4.23.0; stopping at the XPath and Smooks fix 4.22.1 misses it.
1
Cathedral AI agents reached Anthropic business systems in authorized test
Agents used unnamed third-party software to reach sales, HR, and IT data; prompts, source code, and model weights were not accessed.
Opinion: EvilTokens shows AI speeding Microsoft 365 device-code phishing
Microsoft said it disrupted Storm-2992 in September after the service, found in February, used AI across the chain.
1
Malicious AGENTS.md files in Downloads hijack Codex and Claude Code
A customer agent tried to install npm package function-color; tests also stole Claude Code OAuth tokens in about half of runs.
2
Apache Camel OAuth cache reuses tokens across scopes (CVE-2026-94386)
camel-oauth from 4.19.0 before 4.22.2 can reuse client-credentials bearer tokens; CVSS 3.1 is 4.8.
Storm-0940 used AI tool Artex in ConnectWise customer intrusions
Microsoft logged more than 151,000 failed logons and successful sign-ins with ConnectWise cloud application identities.
2
OAuth token theft bypasses MFA and outlives password resets, Unit 42 says
Stolen access and refresh tokens can persist for days or months and move across services tied to the same identity.
2
Microsoft says Storm-0940 used AI to breach ConnectWise tenants
The group attempted more than 2,250 tenant sign-ins at about 2,900 per minute, often gaining access within three hours.
2
Storm-0940 used ARTEX against over 2,250 Microsoft 365 tenants
Stolen ConnectWise application credentials enabled Graph access; a separate spray of more than 151,000 logons had no successful authentication.
5
GitLab patches unauthenticated regex RCE rated CVSS 10.0
CVE-2026-110264 reaches back to GitLab 7.0; self-managed admins must upgrade, and in-the-wild use is not confirmed.
2
Storm-0940 used ARTEX in ConnectWise Cloud Backup supply-chain attack
Microsoft says the agents targeted more than 2,250 tenants at up to 2,900 sign-in attempts per minute.
1
Microsoft attributes ConnectWise supply-chain attack to Storm-0940
The group used ARTEX to reach more than 2,250 tenants at 2,900 sign-in attempts per minute; compromise counts are unstated.
1
Storm-0940 used ARTEX AI in ConnectWise supply-chain attacks
Microsoft says privileged cloud access sometimes took under three hours, with more than 2,250 tenants targeted.
2
GhostAction plants font-disguised stealer in 94 GitHub repositories
Phishing via my-github.com steals GitHub passwords, 2FA, and OAuth tokens, then a VS Code task runs a credential stealer.
6
Contributor urges zero standing privilege for machine identities
A cited survey found 109 machine identities per human and 61% of privileged requests still standing.
3
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Hackers abused ConnectWise Cloud Backup identities to access at least 162 Microsoft 365 tenants.
7
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups
Stolen ConnectWise Cloud Backup credentials accessed 162 Microsoft 365 tenants, forcing ConnectWise to halt backups.
4