TeamPCP: From Redis Attacks to Supply Chain Compromise
Explore TeamPCP's cyber activities from 2020, including Redis attacks and software supply chain compromises, with analysis of campaigns like ShadowRay 2.0.
Cloud Security
More news
Page 4 / 4 · 34 articles
UNC6671 Targets Personal Phones to Steal Microsoft 365 and Okta Access
UNC6671 vishing campaign targets personal phones to steal Microsoft 365 and Okta access, bypassing MFA defenses.
Greatness Expands Microsoft 365 Phishing with AiTM and Device Code Attacks
The phishing-as-a-service platform Greatness , active since at least mid-2022, has expanded its campaigns targeting Microsoft 365 users. The activity
Device Code Phishing: The Threat That Renders MFA Useless
Device code phishing exploits OAuth 2.0 to bypass MFA, even passkeys. Learn how automated kits are stealing tokens in millions of attacks globally.
CosmosEscape: The Exploit Chain That Exposed the Azure Cosmos DB Master Key
Wiz researchers exposed the Azure Cosmos DB Master Key via the CosmosEscape exploit chain. Microsoft patched the critical flaw risking Teams and Copilot data.
Microsoft 365 Crippled: The Nightmare of a Scheduled Maintenance Bug
A Microsoft 365 outage from a maintenance bug halted global operations. Discover the impact of this blackout and how to mitigate risks for your business.
AI Agents: Beyond Visibility, Proactive and Contextual Enforcement Is Needed
AI agent security needs proactive, contextual enforcement beyond visibility to manage dynamic behaviors, mitigate risks, and ensure effective governance.