Tag: Proofpoint
Forgotten service accounts cracked open 28 Microsoft 365 tenants
Proofpoint linked 28 Microsoft 365 tenant intrusions to unrotated service accounts still holding default passwords.
Four spy teams share one BlueMoon kit built on patch-gap bugs
A new exploit kit chained two Chrome flaws and a Windows bug for four espionage crews.
Spy group OWAReaper backdoor survives password changes and device rebuilds
TA488 exploits OWA cross-site scripting flaw to plant browser implants that survive credential rotation.
Chinese espionage group exploits Roundcube flaws to target US and Canadian universities
Chinese espionage group exploits Roundcube webmail vulnerabilities to target US and Canadian universities
Device Code Phishing Campaigns Exploit Microsoft Authentication Flow
Cybercriminals are using Microsoft's OAuth device authorization flow to steal authentication tokens through phishing campaigns that bypass traditional security tools.