Earlier reports mentioning Microsoft
A novel phishing-as-a-service (PhaaS) operation, dubbed Forg365, has emerged, specifically targeting Microsoft 365 accounts. This operation employs a sophisticated multi-pronged approach that includes device code phishing, adversary-in-the-middle (AitM) session theft, and advanced antibot evasion techniques.
A misconfigured Python web server, left running with directory listing enabled on a public port, inadvertently exposed the operational toolkit for three active Evilginx phishing campaigns targeting Microsoft 365. The command used to launch the server, `python3 -m http.server 8080`…
A sophisticated threat actor, identified by Okta as O-UNC-066, is actively targeting organizations across various sectors by exploiting the Microsoft Entra passkey enrollment process. This campaign utilizes voice-based phishing tactics, commonly known as vishing, to trick Microsoft 365 users…
Microsoft has analyzed a destructive Windows backdoor named GigaWiper, which consolidates three distinct destructive tools into a single operational package. This backdoor allows operators to choose from various commands, each designed to inflict damage on a targeted machine.
GitHub announced the release of npm version 12, which disables install scripts by default to enhance supply chain security. This change makes previously automatic npm install behaviors opt-in, with `allowScripts` now defaulting to off.