#mfabypass

CloudSEK reports BigBear 2.0, an Evilginx2-based PhaaS, compromised Microsoft 365 accounts at 258 organizations and stole 5,000+ records. It proxies logins to capture passwords, MFA data and session cookies for replay, bypassing standard MFA. Enforce phishing-resistant auth and token theft detection. #Microsoft365 #Phishing #MfaBypass

CERT/CC discloses six Logto vulnerabilities, including CVE-2026-15611 and CVE-2026-15616, that enable SSO authentication bypass and MFA skipping. #Logto #SSO #SAML #OIDC #MFABypass #CERTCC

A misconfigured server exposed three AiTM phishing operators running Evilginx MFA bypass and Device Code attacks on Microsoft 365 accounts. #AiTMPhishing #Evilginx #MFABypass #Microsoft365 #Phishing