Cloud SecurityPREY-0058 impersonates IT help desks to steal Microsoft 365 session tokens via AiTM phishing and residential proxies, targeting executives for data theft.
Cloud SecurityBigBear 2.0 phishing service compromised Microsoft 365 at 258 organizations using AiTM proxies to steal sessions after MFA and hijack accounts.
Cloud SecuritySpring Ring vishing used fake Teams help desk calls to deploy Quick Assist, RMM tools and NTLM relay attacks on Windows domain controllers.
Cloud SecurityJetBrains disclosed a Cadence breach via CVE-2026-63077 TeamCity RCE, exposing AWS credentials, backups and S3 files from Aug 8-24, 2026.
Cloud SecurityCoder registry was hijacked on Aug 31, 2026 to serve malicious Terraform modules stealing cloud credentials, AI keys and tokens. Learn impact and fixes.
Cloud SecurityHackers are exploiting npm packages and mirrors to host phishing pages that impersonate Cloudflare security checks, redirecting users to malicious sites.
Cloud SecurityMirage2FA phishing campaign compromises 48% of Microsoft 365 targets using AiTM to bypass MFA, affecting US and Europe with stolen sessions enabling SSO fraud.
Cloud SecurityLearn about iAuthFlow V2, a phishing toolkit using passkeys to keep account access after password changes, evading standard defenses.
Cloud SecurityMicrosoft updates 22 security flaws: Entra ID fixed, but ShieldBreak zero-day in Defender still unpatched. Cloud vulnerabilities mostly server-mitigated.