IAM / Zero Trust
IAM / ZERO TRUST
‚NovaCookies‘ Kit Steals Microsoft 365 Sessions for $320 a Month
The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more than just...
IAM / ZERO TRUST
McKesson discloses breach after ShinyHunters claims patient data theft
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft,...
IAM / ZERO TRUST
Cyera’s Oasis Security Buy Is All About AI Agent Control
The $1 billion deal aims to converge data security and identity into a single control plane for agents, with privileged...
IAM / ZERO TRUST
‚NovaCookies‘ Kit Steals Microsoft 365 Sessions for $320 a Month
The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more than just...
IAM / ZERO TRUST
Snowflake ends service-account passwords. Now comes the hard part
Snowflake is ending password authentication for legacy service accounts, forcing organizations to migrate them to passwordless methods. Token Security explains...
IAM / ZERO TRUST
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that's used as a proxy to...
IAM / ZERO TRUST
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft...
IAM / ZERO TRUST
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple's Activation Lock from stolen devices, using...
IAM / ZERO TRUST
‚GhostJacking‘ Exposes Identity Governance Gaps in AI Agents
New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents....
IAM / ZERO TRUST
Cyera’s Oasis Security Buy Is All About AI Agent Control
The $1 billion deal aims to converge data security and identity into a single control plane for agents, with privileged...