The Top 4 Threats We Found by Investigating Every Alert for a Quarter

Identity was the target in roughly half of all confirmed malicious activity. Prophet Security breaks down the four main ...
Microsoft

Passkey-themed social engineering leads to identity and cloud compromise

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, ...

MFA's Weakest Link: Account Recovery Is the New Attack Path

MFA makes account takeover harder, but attackers are increasingly targeting the recovery processes used to reset passwords ...

Microsoft 365 users hit by two major threat campaigns

BigBear 2.0 and PREY-0058 are wreaking havoc across businesses as they scam employees into handing over login credentials and ...
Cyber Security News

BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie Theft

BigBear 2.0 uses Evilginx2 to steal Microsoft 365 credentials and session cookies, bypassing MFA through phishing.
TMCnet

AI Cyberattacks. The Industry Gives Warning. WinMagic Gives the Fix.

As more than 150 technology, cybersecurity, and financial organizations warn of accelerating AI-enabled attacks, WinMagic CEO ...