The phishing campaign targeted users on WhatsApp, including an Iranian-British activist, and stole the credentials of a ...

ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push ...

The core technical mechanism described is NFC chip reading from government-issued identity documents, including passports and national ID cards. IDENTT says users are prompted to tap the document to ...

Cybercriminals are launching a widespread wave of phishing attacks that bypass Multi-Factor Authentication (MFA) by exploiting a standard Microsoft 365 feature. Security researchers at Proofpoint warn ...

Hackers are abusing a legitimate Microsoft authentication feature to break into enterprise Microsoft 365 accounts, even when multifactor authentication is enabled. Security researchers warn that ...

Microsoft 365 is under attack, China and Russia afflited hackers suspected. Updated December 23 with advice from a mobile security solutions expert regarding the Russian device code attacks targeting ...

Abstract: The secure access of numerous heterogeneous devices ensures the stability of the industrial Internet of Things. Centralized authentication can be overwhelmed by an influx of authentication ...

Since September 2025, a suspected Russia-aligned group known as UNK_AcademicFlare has executed a phishing campaign targeting Microsoft 365 credentials. The campaign mainly impacts entities in ...

We’ve been tracking rumors about Apple’s push into the smart home market for years, but we’ve yet to see anything come to fruition beyond a new Home app architecture. That may be about to change very ...

Fortinet, Ivanti, and SAP have moved to address critical security flaws in their products that, if successfully exploited, could result in an authentication bypass and code execution. The Fortinet ...

The Advanced Medical Technology Association (AdvaMed) updated its Code of Ethics effective November 1, 2025, primarily to add a new section on “data-driven technologies,” including the security of ...

This authentication extension for Keycloak provides an authentication execution enabling users to complete authentication with another device. With QR code authentication, users can quickly and ...