Hackers Use Procurement Phishing and AiTM Kits to Hijack MFA-Protected Microsoft 365 Sessions
A sophisticated phishing campaign is using procurement-themed emails and adversary-in-the-middle (AiTM) kits to steal MFA-protected Microsoft 365 sessions.
Rather than breaking MFA, attackers proxy...
Hackers Abuse Fake OAuth Client IDs to Validate Microsoft Entra Accounts and Passwords
Threat actors are spoofing OAuth application client IDs in Microsoft Entra ID authentication requests to identify valid accounts and credentials without producing a successful...
Hackers Backdoor pam_unix.so and OpenSSH Binaries to Steal Credentials and Bypass Authentication
Threat actors linked to China have maintained a hidden presence inside a highly secure critical infrastructure network for nearly a decade.
Tracked by Sygnia...
Suspicious Assistive Agent Behavior Detected Through Microsoft Entra Agent ID Logs
As organizations rapidly adopt AI-driven workflows like Microsoft Copilot, security teams face a new challenge: tracking the actions of autonomous and assistive agents.
In...
Passkey Architecture In Google Authenticator Poses New Cyberattack Threats
Google Authenticator's widely adopted passwordless architecture introduces a hybrid model that blends hardware security with cloud-based key management, creating new and largely unexplored attack...