Tag: mfa bypass
245 articles
AI Compresses Cyberattack Loops, Pressures SOC Response Times
Cybercriminals are now leveraging AI to supercharge their attacks, using it to discover vulnerabilities, develop exploits, and automate tasks - putting pressure on security teams to respond faster than ever. In fact, by late 2025, AI-powered malware and illicit AI tools were already emerging on the dark web, changing the game for threat actors.
Salesforce Vulnerabilities Expose CRM Data to Zero-Click Attacks
Meet SalesBleed, a trio of security flaws in Salesforce Agentforce that allowed hackers to hijack AI agents, steal sensitive CRM data, and send phishing messages - all without a single click. These vulnerabilities exposed the power of unchecked AI, as one expert warned: it's a lesson in what it takes to keep AI agents contained.
Microsoft Disrupts EvilTokens AI-Powered Phishing Service
Microsoft and its partners have successfully dismantled an AI-powered phishing service, known as EvilTokens, that had compromised over 12,000 email inboxes across 10,000 organizations worldwide. This court-authorized takedown marks a significant win in the fight against cybercrime.
Microsoft Disrupts EvilTokens Cybercrime Service
Microsoft and its partners have successfully dismantled the EvilTokens cybercrime service, seizing 50 websites and disabling over 175 domains used to target and exploit victims. This disruption was made possible through a powerful collaboration with industry leaders, including Cloudflare, OpenAI, and Coinbase, to protect potential victims and take down the operation.
Microsoft Disrupts EvilTokens Phishing Service, Arrests Suspects
Microsoft swooped in to dismantle the EvilTokens phishing service, a sneaky AI-powered operation that had already compromised 12,000 email inboxes across 10,000 organizations worldwide. The service, which emerged in February, was sold as a phishing kit and came equipped with a clever AI chatbot that helped scammers identify and target high-value victims.
Microsoft Disrupts EvilTokens Phishing Service Targeting 12,000 Accounts
Microsoft's Digital Crimes Unit has struck a major blow against cybercrime, disrupting the EvilTokens phishing service that targeted over 12,000 accounts. Two suspected administrators were arrested in the UK as part of the operation.
Fake LastPass Installer Exploits Microsoft Driver to Disable Antivirus Software
Beware of fake LastPass installers that can disable your antivirus software and steal your saved credentials. A convincing fake LastPass Authenticator page on GitHub tricked victims into downloading a malicious ZIP archive that paved the way for a password stealer.
Ransomware Actors Exploit Active Directory Group Policy
In a clever twist, hackers used Active Directory Group Policy to spread ransomware across an entire domain without installing a single malicious file on individual computers. By exploiting this native tool, they were able to hijack wallpapers, lock screens, and even disable admin accounts, all with just a few clicks.
AI Model Exploits Chained Flaws to Breach OpenAI Staff Accounts
In just 72 hours, researchers exploited a chain of flaws - starting with a bug in image-processing software - to breach several OpenAI staff accounts and gain access to an internal code repository. The surprising attack began with a vulnerability in a library used to parse HEIC and HEIF images, highlighting the potential for unexpected entry points.
Malware Campaign Targets LastPass Users with Rapuncel Infostealer
Beware of a sneaky malware campaign targeting LastPass users with the Rapuncel Infostealer - hackers are using fake GitHub repositories and search engine tricks to steal your info. Victims who search for popular software like LastPass Authenticator may unknowingly download the malware.
Malware Exploits Browser Flaws to Force Install Malicious Extensions
A sneaky malware operation, tracked as KREMLIN, has infected 1,515 systems, mostly in Brazil, by secretly installing malicious Chrome and Edge extensions that steal sensitive info. This cunning toolkit impersonates banks to trick victims into giving up their credentials and session tokens.
Browser Extensions Expose AI Assistants to Takeover Risk
Researchers found that AI assistants in popular browser extensions are vulnerable to takeover risks due to a common architecture that splits the assistant into a browser-based "body" and a server-based "brain". This setup can be exploited with just two ordinary permissions, leaving users exposed.
N0va Phishkit Targets Businesses with Legitimate Authentication Flows
Meet N0va, a sneaky phishkit that's duping businesses across North America and Europe by masquerading as trusted services and exploiting genuine authentication flows. Its clever attack chain can swiftly turn a single phishing click into persistent access to corporate resources.
Microsoft 365 Phishing Attacks Expose Data Theft Tactics
Microsoft warns that cyber attackers are using clever social engineering tactics, like impersonating IT help desks, to trick employees into spilling sensitive info and gaining access to Microsoft 365 accounts. These scammers do their homework, researching companies and staff on social media and professional networks to make their attacks convincing.
Identity Theft Dominates 4 Key Threat Patterns
Malicious hackers targeted identities in nearly half of all confirmed attacks, with session hijacking and replay emerging as the most effective tactics for gaining unauthorized account access. This alarming trend highlights the growing threat of identity theft in today's digital landscape.
Trezor Users Targeted in Phishing Attacks After Email Breach
Beware of a phishing scam targeting Trezor users: a fake "Critical Security Alert" email is circulating, claiming to be from Trezor but is actually an attempt to steal your info. Don't click on any links - Trezor has confirmed it's a scam and is investigating.
Infostealer Logs Expose AI Tokens That Can Bypass MFA
Cybercriminals are exploiting infostealer logs to get their hands on valuable AI tokens, allowing them to bypass multi-factor authentication and access commercial AI services without needing a username and password. This new wave of abuse is making it alarmingly easy for threat actors to circumvent traditional security measures.
WeChat Zero-Click Flaw Exploited to Hijack Accounts via Incoming Calls
A security firm, Calif, has successfully demonstrated a zero-click worm that can hijack WeChat accounts on both iPhone and Android devices with just an incoming call, and fortunately, the exploit has been blocked for all users. This alarming vulnerability was responsibly disclosed to Tencent in July, putting an end to the threat.
Microsoft 365 Phishing Op Exposes Thousands of Credentials
A recent phishing operation exposed a staggering 5,137 records from 461 organizations, including 1,032 plaintext passwords and 474 fully authenticated Microsoft 365 sessions that could be easily exploited. This massive haul highlights the alarming vulnerability of sensitive credentials to clever phishing tactics.
Microsoft 365 Targets in Fake IT Call Data Theft, Extortion Scheme
Beware of fake IT calls that can trick you into giving away your Microsoft 365 login credentials - scammers are using a clever vishing scheme to steal account details and hold them for ransom. It starts with a convincing phone call from someone claiming to be from IT, directing you to a fake authentication page.
Phishing Service BigBear Exposes 258 Firms to MFA Bypass
BigBear 2.0, a sneaky phishing-as-a-service operation, has compromised 258 companies by bypassing multi-factor authentication (MFA) for Microsoft 365 users worldwide, swiping 5,137 credential records in the process. This cunning attack used an adversary-in-the-middle approach to intercept passwords, MFA tokens, and session cookies, allowing hackers to hijack authenticated sessions with ease.
JSCeal Malware Exploits Stolen Cookies to Bypass Google Authentication
Meet JSCeal, a sneaky malware that's using stolen cookies to outsmart Google's authentication - putting retail traders and cryptocurrency users in its crosshairs. It's spread through clever malvertising tactics, including fake ads on Facebook and Google that lead victims to counterfeit trading sites.
Passkey Security Compromised by 39 New Attack Methods
The promise of passkey security has been cracked: 39 new attack methods have been uncovered, threatening the layers of protection surrounding modern passkey systems. From phishing to credential theft, these vulnerabilities expose the weaknesses in what was thought to be a foolproof solution.
Malware Campaign Disables Windows Update, Weakens Defender
A sneaky malware campaign has been disabling Windows Update and weakening Defender, compromising multiple organizations and industries worldwide, with a focus on China-based operations and Chinese-speaking users. The culprit behind this malicious activity is linked to a Chinese threat cluster known as Silver Fox, or Yinhu.