Latest about mfa
Meta patches flaw that allowed MetaAI support bot to hand out password reset links without 2FA
Hackers were targeting high-profile accounts by tricking AI into sharing reset codes without validation.
Microsoft warns hackers are exploiting password resets to gain access to user accounts
Storm-2949 is engaged in a "methodical, sophisticated, and multi-layered" campaign against Microsoft 365 accounts.
Microsoft flags major phishing campaign targeting 35,000 users across 26 countries
The goal is to steal Microsoft credentials and bypass MFA, the company says.
Google Chrome rolls out a new tool to try and stop infostealer malware in its tracks
New Device Bound Session Credentials feature for Google Chrome is also coming to macOS soon.
North Korean hackers using malicious QR codes in spear phishing, FBI warns
Kimsuky's latest attacks can bypass email protections and MFA to steal M365 and VPN accounts.
Dozens of organizations fall victim to infostealers after failing to enforce MFA
50 companies allowed access to cloud instances with just a password and were compromised with infostealers.
Hackers are exploiting OAuth loophole for persistent access - and resetting your password won't save you
These fully automated attacks let hackers retain serious access to OAuth apps.
Germany's government wants to replace passwords with passkeys
Germany’s Federal Office for Information Security wants to make passkeys the default option.
