Advertisement
OAuth 2.0 Device Code Phishing Surge: Protecting M365 and Google
Device code phishing attacks have surged 37x this year. Learn how adversaries abuse the OAuth 2.0 Device Authorization Grant to bypass MFA and hijack accounts.
Residential Proxies Bypass 78% of IP Reputation Checks
Residential proxies effectively bypass IP reputation systems in 78% of sessions, enabling widespread bot attacks like credential stuffing and account takeovers.
EvilTokens Fuels Microsoft Device Code Phishing & BEC
New EvilTokens service automates Microsoft device code phishing, enabling account takeover and sophisticated business email compromise (BEC) attacks. Learn how to defend.
Credential Theft Surge: Understanding Infostealer & AI Social Engineering
Credential theft surged in late 2025, driven by sophisticated infostealer malware and AI-enhanced social engineering.
Loblaw Data Breach: Analyzing the PC Optimum Account Resets
Canadian retail giant Loblaw notifies customers of a security breach affecting PC Optimum accounts, prompting a mandatory session reset for all users.
Phishing Campaign Leverages Fake Google PWA to Steal Credentials, MFA
A sophisticated phishing campaign uses a fake Google Security PWA to compromise accounts, steal MFA codes, and proxy traffic. Learn how to protect.
Advertisement