@bizbln.bsky.socialMicrosoft shuts down EvilTokens AI hacking service 12k email accounts compromised! Vigilance needed. #Microsoft #EvilTokens #AI #Cybersecurity #DataBreach #MFA #Hackers
@drewmakesmovies.bsky.socialtrying to knock out another 15 script pages by friday afternoon.
off to write!!!
@thenewoil.orgRogue external #MFA providers can steal passwords during logins
@dtechcloud.bsky.socialBefore approving a sign-in request: stop, confirm that you started it, and deny anything you do not recognize. Report repeated prompts.
#DTechCloud #MFA #CybersecurityAwareness
dtechcloudservices.com/about-us/con...
@betsywithycombe.bsky.social
@fbubbers.bsky.social
@cyfar.ca~Spiderlabs~
Public SSPR portal exposes valid users, MFA methods, and likely admins.
-
IOCs: passwordreset[.]microsoftonline[.]com, github[.]com/mlcsec/ResetSpy
-
#MFA #SSPR #ThreatIntel
@elixistechnology.bsky.socialMFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site WHILE stealing your session! Use passkeys for important accounts, and never log in through an emailed link.
@wendytokunaga.bsky.socialWho are MFA Workshops Really For? lithub.com/who-are-mfa-...
#writing #workshops #MFA #writinglife #writingcommunity
@wendytokunaga.bsky.socialBrenda Barker's Next Chapter: The Ups and Downs of Being a Writer wendytokunaga.com #writing #writinglife #MFA #writingcommunity #novels #readingcommunity #booksky
@mjetechnologies.comA new attack (TrustSink) lets a compromised admin account impersonate a Microsoft MFA prompt, capturing passwords even after resets. A reminder that MFA is only as strong as the privileged accounts controlling it. #MJE #Cybersecurity #MFA #MicrosoftEntra #IdentitySecurity
@reconbee.bsky.socialRogue external MFA providers can steal passwords during logins reconbee.com/rogue-extern...
@anonturk.bsky.social
@ltswi.bsky.socialMFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.
@uwannawat.bsky.socialMFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.
@geekpoint.bsky.socialMFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.
@ahmandonk.bsky.social📰 Microsoft Ingatkan Admin Entra ID untuk Migrasikan Pengguna ke Passkey
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/22/microsoft-entra-id-migrasi-passkey-sms-sign-in-2027/
#authentication #azure #cybersecurity #entraId #fido2 #identitySecurity #keamananSiber #mfa #microsof
@thedailytechfeed.comMicrosoft Entra tops MFA showdowns; Yubico sets the assurance ceiling. #MFA #Cybersecurity #Identity #Microsoft #Yubico #Passkeys #Auth #Security https://thedailytechfeed.com/2026s-top-mfa-platforms-ranked-microsoft-dominates-yubico-sets-assurance-bar/
@novoitltd.bsky.social🎣 MFA is essential, but sophisticated phishing attacks can still trick users into handing over their login session.
🔑 For your most important accounts, consider phishing-resistant options such as passkeys — and never log in through unexpected email links
@alexkudera.bsky.social