The only letters I'm interested in are #UBI and #MFA

Phishing pretending to be passkey support is bypassing MFA and stealing Microsoft 365 data. #Security #Phishing #Microsoft365 #MFA #CloudSecurity #IdentityProtection thedailytechfeed.com/phishing-att...

Infostealer logs are exposing replayable AI session tokens, JWTs, and API keys, letting attackers bypass MFA and hijack accounts from Google, Anthropic, and OpenAI for resale and LLMjacking. #AI #MFA #OpenAI

#BigBear #Microsoft365 #phishing service bypassed #MFA at 258 organizations

https://www.bleepingcomputer.com/news/security/bigbear-microsoft-365-phishing-service-bypassed-mfa-at-258-organizations/

#Microsoft #cybersecurity

MFA raises the bar, but attackers now target account recovery. Social engineering help desks can trigger resets and MFA bypasses, as seen with Scattered Spider and the Marks and Spencer breach. #MFA #HelpDesk #Ransomware

Unexpired AI session tokens let attackers bypass MFA. Token replay attacks are real. #AI #Cybersecurity #TokenSecurity #MFA #Infostealer #AIThreats #JWT #APIKeys thedailytechfeed.com/ai-session-t...

Global PhaaS 'BigBear 2.0' uses custom Evilginx2 to bypass MFA in Microsoft 365 attacks. The service steals session cookies, targeting MSPs and IT firms. Phishing-resistant MFA is the key defense. #PhaaS #MFA #M365 #Phishing #CyberSecurity

🌐 cyber[.]netsecops[.]io

Security insurance mostly pays: UK insurers paid out £197m in claims in 2024. The refusals trace back to proposal forms that said things that were not true. Treat the renewal questionnaire as a statement of fact, because in law it is one. Read the filing #insurance #mfa #backups #infosec

AI support bots exposed via OTP leaks, spoofed emails & prompt injections. #AI #Cybersecurity #BotSecurity #PromptInjection #EmailSpoofing #MFA https://thedailytechfeed.com/ai-customer-service-bots-exploited-to-steal-security-codes/

BigBear 2.0, uma estrutura maliciosa de phishing, contornou a autenticação multifator (MFA) em 258 organizações e roubou mais de 5.000 credenciais do Microsoft 365. 🚨

#mfa #microsoft

Great point! Your weakest link dictates security. Always review *all* login methods, not just your primary. #SSO #MFA #InfoSec

Phishing-as-a-service bypassed MFA at 258 orgs. Patch now and enforce FIDO2. 🔒

#Phishing #MFA #Potatosecurity

5,000 Dropbox accounts entered with no password. The way in was a Lenovo sign-in route most account holders never knew existed and never chose. Your account is only as secure as its weakest sign-in method, not its strongest. Read the filing #sso #dropbox #mfa #infosec

A newly analyzed malware called #JSCEAL can steal browser session cookies and potentially bypass Google authentication.

#Cybersecurity #Malware #InfoSec #IdentitySecurity #MFA #GoogleSecurity #ThreatIntelligence #EndpointSecurity #Malvertising #ZeroTrust

thehackernews.com/2026/09/jsce...

"Land" by William Aarnes — a sharp, wry poem from the heartland.

https://sanantonioreview.org/2026/09/07/land/

#Poetry #RuralLife #MFA #SanAntonioReview

「今年こそMFAを全社へ」で詰まるのは人のアカウントではなく、夜間バッチ・RPA・監視ツール・会議室端末みたいな「認証の瞬間に人がいないID」のほう 🌙

止まると困るから除外グループに入れる、また止まったから追加する。何年か続けると、攻撃者にとって一番おいしいIDだけが一箇所に集まります。

新しい動画は、その塊を解きほぐす手順を棚卸しから整理した回。除外グループを作る前にどうぞ。

#EntraID #MFA
https://youtu.be/abOB7LaXDIg

Der #Transportdienst brachte mich teils mitten in der Nacht quer durchs Krankenhaus und so viele weitere Personen wie Mitarbeitende in der Reinigung,
#MTA, #MFA, #Labor Mitarbeitende,... sind teils rund um die Uhr für PatientInnen da.

All diese Menschen waren daran beteiligt, mein Leben zu retten.

🔐「MFAを導入したから安心」で止まっていませんか？

Entra IDの認証強度、フィッシング耐性、ゲストのMFA。普段ひとくくりにしている認証方式を、17分で整理しました。自組織の設定を思い浮かべながら見てみてください。

YouTubeメンバーシップ先行公開中です！視聴には対象のチャンネルメンバーシップが必要です。
https://youtu.be/bqJXcGue37Y
#MFA #EntraID