Browsing Tag
MFA
11 posts
New SessionShark Phishing Kit Bypasses MFA to Steal Office 365 Logins
SessionShark phishing kit bypasses Office 365 MFA by stealing session tokens. Experts warn of real-time attacks via fake…
Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing
Russian APT group Storm-2372 employs device code phishing to bypass Multi-Factor Authentication (MFA). Targets include government, technology, finance,…
Hackers Using Fake Microsoft ADFS Login Pages to Steal Credentials
A global phishing campaign is actively exploiting a legacy Microsoft authentication system to steal user credentials and bypass multi-factor authentication (MFA), targeting over 150 organizations.
AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft’s Multi-Factor Authentication (MFA), known as AuthQuake,…
Iranian Hackers Target Microsoft 365, Citrix Systems with MFA Push Bombing
Iranian hackers are targeting critical infrastructure organizations with brute force tactics. This article explores their techniques, including MFA…
Cybersecurity Tips For Businesses Using Remote Workers
Remote work offers benefits like reduced costs and wider recruitment but also increases cybersecurity risks. To protect your…
Findings Show MFA Bypass in Microsoft Azure Entra ID Using Seamless SSO
Concerned about a potential MFA bypass in Microsoft Azure Entra ID? This article explores the research, explains the vulnerability in context, and offers actionable steps to secure your organization.
Implementing the Least Privilege Principle to Safeguard Your Assets
The least privilege principle is a crucial concept in cybersecurity that involves granting users the minimum level of…
Elevating Data Security: Key Considerations When Transferring Your Digital Workspace
Data security is vital for protecting sensitive information and maintaining trust.
Warning as hackers breach MFA to target cloud services
According to CISA, it has verified one of the users had their account breached even though they were using "proper multi-factor authentication (MFA)."