Security Affairs·3d ago highEvilTokens made phishing-as-a-service look easy. Then it got taken down#business-email-compromise#device-code-phishing#evil-tokens 14 sources in the wild 5 min
The Register · Security·18d ago highBigBear phishing crew nets thousands of Microsoft 365 credentials#adversary-in-the-middle#cloudsek#evilginx2 in the wild 3 min1
DataBreaches.net·19d agoBigBear Microsoft 365 phishing service bypassed MFA at 258 organizations#aitm#bigbear#cloudsekPhishing & fraud in the wild1
BleepingComputer·19d ago highBigBear Microsoft 365 phishing service bypassed MFA at 258 organizations#aitm#bigbear#cloudsek in the wild 3 min1
The Hacker News·23d ago highThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories#browser-in-the-middle#dll-sideloading#microsoft-teams in the wild 15 min1
The Hacker News·25d agoThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories#android-malware#botnet#clickfix in the wild 15 min
Dark Reading·Aug 26, 2026'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month#aitm#mfa-bypass#microsoft-3651
Help Net Security·Aug 26, 2026AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes#activation-lock#ai-voice-agents#anonymouskit 3 min
The Hacker News·Aug 25, 2026 highMirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows#aitm#any-run#mfa-bypass in the wild 4 min1
ANY.RUN·Aug 18, 2026 highMirage2FA Hijacks Companies’ Microsoft 365 Sessions, with Over 4K Victims in the US#adversary-in-the-middle#any.run#credential-harvesting in the wild2