@thedailytechfeed.comTrustSink turns trusted MFA into a password trap inside Microsoft Entra. #SecurityNews #MicrosoftEntra #MFA #TrustSink #IdentitySecurity #PhishingResistant https://thedailytechfeed.com/trustsink-new-rogue-mfa-attack-steals-microsoft-entra-passwords/
@thenewoil.orgRogue external #MFA providers can steal passwords during logins
@hendryadrian.bsky.socialTrustSink abuses Microsoft Entra external MFA providers to inject a fake password prompt, steal credentials during sign-in, and persist until the rogue provider is removed. #TrustSink #MicrosoftEntra #VaronisLabs
@hendryadrian.bsky.socialWeekly threat recap: GhostCode credential theft, TrustSink rogue Entra MFA abuse, and Fast Flux phishing led activity. Also covered KREMLIN, RatHat, and APT/supply-chain ops. #GhostCode #TrustSink #FastFlux