Tag: MFA
Stolen AI session tokens let thieves skip the login step
Okta found thousands of live AI session tokens in a stealer log, letting thieves replay their way into paid tools.
BigBear 2.0 phishing panel reveals thousands of stolen Microsoft sessions
CloudSEK says it reached the admin panel of a phishing service holding thousands of session cookies stolen from Microsoft 365…
FBI flags OAuth consent phishing that survives password resets
The FBI warns OAuth consent phishing has been seizing prominent people's accounts since late 2025, and password resets do not…
One approved push notification let vishers into ReliaQuest
One approved MFA push gave ShinyHunters-linked callers a brief view-only session inside ReliaQuest.
iAuthFlow V2 kit keeps access alive with attacker passkeys
A new phishing kit enrolls attacker passkeys to keep access after password resets.
Akira’s Safe Mode play blinds EDR but crashes its own encryptor
Huntress says an Akira affiliate rebooted a victim into Safe Mode to kill EDR, then the encryptor crashed on the…
Snowflake extortion suspect admits theft from 165 companies
Connor Riley Moucka admitted his role in the 2024 Snowflake raids that exposed records tied to more than 100 million…