The premiere of my short film "AITM" will take place on November 7 in Asheville, North Carolina, USA, as part of the Nothing to Film Festival. My sincere thanks to the festival and my team.

#inessastefans #blondInna #aitm #nothingtofilmfestival #andriimakarchenko

@talosintelligence.com
APT campaign uses AI-crafted lures, quishing and real-time Google AitM to steal credentials, MFA and sessions.
-
IOCs: UAT-11985, Html[.]Phishing[.]UAT11985-10060614-0, Snort SID 1:67198
-
#AitM #Phishing #ThreatIntel

@sophossecurity.bsky.social
Asymmetric routing creates firewall inspection gaps that can enable AiTM attacks and disrupt stateful sessions.
-
IOCs: (None identified)
-
#AiTM #NetworkSecurity #ThreatIntel

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing reconbee.com/china-aligne...

#china #TA419 #unitedstates #microsoft #Aitm #phishing #cybersecurity #cyberattack

For sale: a phishing toolkit that taps social media posts and advertisements to deliver adversary-in-the-middle attacks. The Chinese-language kit, 'Milk Dragon,' is sold on a subscription basis.
www.databreachtoday.com/phishing-too... #AiTM

EDR can miss browser-only attacks that stay in SaaS sessions and identity flows. Browser controls, identity protections, and SaaS policies can block AiTM phishing, malicious extensions, and ClickFix before endpoint telemetry. #AiTM #BrowserSecurity

📢 ShinyHunters : kit de vishing AiTM contournant le MFA Okta via clones de pages et bypass passkey

Cet article présente une analyse technique approfondie d'une campagne de vishing active attribuée à un groupe opérant sous le label…

🟡 vérification factuelle moyenne
#AiTM #Okta #Cyberveille

⚠️🎣 Passkey phishing hijacks cloud accounts

Fake IT support uses #AitM or device-code flows, adds attacker-controlled MFA and steals Microsoft cloud data.

🔗 read more: thehackernews.com/20...

#ransomNews #cyberthreats #Phishing

📢 Ingénierie sociale sur le thème des passkeys mène à la compromission d'identités cloud

Cet article présente une analyse technique détaillée d'une campagne d'intrusion cloud active observée depuis mai 2026, ciblant des identités…

🟢 vérification factuelle haute
#passkey #AiTM #Cyberveille

BigBear 2.0 phishing bypasses Microsoft 365 MFA via Evilginx2, stealing 474 sessions across 461 orgs in 40+ countries as a PhaaS service.

#BigBear20 #Evilginx2 #Phishing #MFABypass #Microsoft365 #AiTM #PhaaS

BigBear 2.0: la piattaforma di phishing-as-a-service che aggira anche l’MFA di Microsoft 365
il blog: insicurezzadigitale.com/bigbear-2-0-...

#cybersecurity #aitm #cybercrime #evilginx2 #infosec #mfabypass #microsoft365 #phaas #phishing #spearphishing