BigBear 2.0 uses Evilginx2 to steal Microsoft 365 credentials and session cookies, bypassing MFA through phishing.

First identified in June 2026, the operation targeted Microsoft 365 users and was reportedly still active during the ...

HPE Aruba Networking patched 24 flaws in its enterprise switch OS, including two independent unauthenticated RCE bugs -- a ...

Importantly, Okta also found that organizations frequently targeted by serious threat actors almost always have their users ...